CVE-2024-12648

CWE-787 — Out-of-bounds Write3 documents3 sources

Severity

9.8CRITICAL

EPSS

0.3%

top 46.18%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Canon Lbp1238 II Firmware Canon Lbp1440 Firmware Canon Lbp236dw Firmware +32 more

Timeline

PublishedJan 28

Description

Buffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and ea…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages35 packages

▶CVEListV5canon_inc./color_imageclass_mf654cdw05.04 and earlier

▶CVEListV5canon_inc./color_imageclass_mf656cdw05.04 and earlier

▶CVEListV5canon_inc./color_imageclass_lbp633cdw05.04 and earlier

▶CVEListV5canon_inc./color_imageclass_mf652cdw05.04 and earlier

▶CVEListV5canon_inc./color_imageclass_mf653cdw05.04 and earlier

🔴Vulnerability Details

GHSA

GHSA-9cwq-g8xg-jgrg: Buffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the netwo↗2025-01-28

▶

CVEList

CVE-2024-12648: Buffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the netwo↗2025-01-28

▶