CVE-2025-9903
Medium
Description
Out-of-bounds write vulnerabilities in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus LIPSLX Printer Driver / Generic Plus PS Printer Driver / UFRII LT Printer Driver / CARPS2 Printer Driver / Generic FAX Driver / LIPS4 Printer Driver / LIPSLX Printer Driver / UFR II Printer Driver / PS Printer Driver / PCL6 Printer Driver
SeverityMedium
CVSS5.9
Exploit probability—
ProductGeneric Plus PCL6 Printer Driver
PublishedSep 29, 2025
First seenSep 29, 2025
Weakness typeCWE-787Out-of-bounds write
How to fix
Vendor advisories
- psirt.canon/advisory-information/cp2025-005/
- canon.jp/support/support-info/250925vulnerability-response
- usa.canon.com/about-us/to-our-customers/cp2025-005-vulnerabilities-remediation-for-certain-printer-drivers-for-production-printers-office-small-office-multifunction-printers-laser-printers
- canon-europe.com/support/product-security/
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Canon Inc. Generic Plus PCL6 Printer Driver | 3.30 and earlier | — |
| Canon Inc. Generic Plus UFR II Printer Driver | 3.30 and earlier | — |
| Canon Inc. Generic Plus LIPS4 Printer Driver | 3.30 and earlier | — |
| Canon Inc. Generic Plus LIPSLX Printer Driver | 3.30 and earlier | — |
| Canon Inc. Generic Plus PS Printer Driver | 3.30 and earlier | — |
| Canon Inc. UFRII LT Printer Driver | 31.05 and earlier | — |
| Canon Inc. CARPS2 Printer Driver | 31.05 and earlier | — |
| Canon Inc. Generic FAX Driver | 10.67 and earlier | — |
| Canon Inc. LIPS4 Printer Driver | 15.00 and earlier | — |
| Canon Inc. LIPSLX Printer Driver | 15.00 and earlier | — |
| Canon Inc. UFR II Printer Driver | 15.00 and earlier | — |
| Canon Inc. PS Printer Driver | 15.00 and earlier | — |
| Canon Inc. PCL6 Printer Driver | 15.00 and earlier | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.