CVE-2025-9903Out-of-bounds write vulnerabilities in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus LIPSLX Printer Driv…
Updated under an hour ago ()
Does this affect you?
It affects Canon Inc. Generic Plus PCL6 Printer Driver and 12 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
Out-of-bounds write vulnerabilities in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus LIPSLX Printer Driver / Generic Plus PS Printer Driver / UFRII LT Printer Driver / CARPS2 Printer Driver / Generic FAX Driver / LIPS4 Printer Driver / LIPSLX Printer Driver / UFR II Printer Driver / PS Printer Driver / PCL6 Printer Driver
- CVSS
- 5.9 MEDIUM (v3.1, CNA)CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L
- Weakness (CWE)
- CWE-787
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Canon
- NVD analysis
- Deferred
- Record last updated
- Mar 15, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Canon Inc. Generic Plus PCL6 Printer Driver canon:generic_plus_pcl6_printer_driver (from the name) | 3.30 and earlier | CNA record |
Canon Inc. Generic Plus UFR II Printer Driver canon:generic_plus_ufr_ii_printer_driver (from the name) | 3.30 and earlier | CNA record |
Canon Inc. Generic Plus LIPS4 Printer Driver canon:generic_plus_lips4_printer_driver (from the name) | 3.30 and earlier | CNA record |
Canon Inc. Generic Plus LIPSLX Printer Driver canon:generic_plus_lipslx_printer_driver (from the name) | 3.30 and earlier | CNA record |
Canon Inc. Generic Plus PS Printer Driver canon:generic_plus_ps_printer_driver (from the name) | 3.30 and earlier | CNA record |
Canon Inc. UFRII LT Printer Driver canon:ufrii_lt_printer_driver (from the name) | 31.05 and earlier | CNA record |
Canon Inc. CARPS2 Printer Driver canon:carps2_printer_driver (from the name) | 31.05 and earlier | CNA record |
Canon Inc. Generic FAX Driver canon:generic_fax_driver (from the name) | 10.67 and earlier | CNA record |
Canon Inc. LIPS4 Printer Driver canon:lips4_printer_driver (from the name) | 15.00 and earlier | CNA record |
Canon Inc. LIPSLX Printer Driver canon:lipslx_printer_driver (from the name) | 15.00 and earlier | CNA record |
Canon Inc. UFR II Printer Driver canon:ufr_ii_printer_driver (from the name) | 15.00 and earlier | CNA record |
Canon Inc. PS Printer Driver canon:ps_printer_driver (from the name) | 15.00 and earlier | CNA record |
Canon Inc. PCL6 Printer Driver canon:pcl6_printer_driver (from the name) | 15.00 and earlier | CNA record |
References
- https://psirt.canon/advisory-information/cp2025-005/vendor-advisory
- https://canon.jp/support/support-info/250925vulnerability-responsevendor-advisory
- https://www.usa.canon.com/about-us/to-our-customers/cp2025-005-vulnerabilities-remediation-for-certain-printer-drivers-for-production-printers-office-small-office-multifunction-printers-laser-printersvendor-advisory
- https://www.canon-europe.com/support/product-security/vendor-advisory
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.