CVE-2024-12649: Buffer Overflow
Buffer overflow in XPS data font processing of Small Office Multifunction Printers and Laser Printers() which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. : Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12649?
The severity of CVE-2024-12649 is critical due to the potential for remote code execution or denial of service.
How do I fix CVE-2024-12649?
To fix CVE-2024-12649, update the firmware of affected models to the latest version provided by Canon.
Which devices are affected by CVE-2024-12649?
Devices affected by CVE-2024-12649 include Canon Satera MF656Cdw and MF654Cdw, among others, running firmware version 05.04 or earlier.
What type of vulnerability is CVE-2024-12649?
CVE-2024-12649 is a buffer overflow vulnerability in the font processing of XPS data.
Can CVE-2024-12649 be exploited remotely?
Yes, CVE-2024-12649 can be exploited by an attacker on the same network segment.