CVE-2025-63701: Medium severity Advantech TP-3250 printer driver vulnerability
A heap corruption vulnerability exists in the Advantech TP-3250 printer driver's DrvUIx64ADVANTECH.dll (v0.3.9200.20789) when DocumentPropertiesW() is called with a valid dmDriverExtra value but an undersized output buffer. The driver incorrectly assumes the output buffer size matches the input buffer size, leading to invalid memory operations and heap corruption. This vulnerability can cause denial of service through application crashes and potentially lead to code execution in user space. Local access is required to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-63701?
CVE-2025-63701 has been classified with a high severity due to the potential for heap corruption.
How do I fix CVE-2025-63701?
To fix CVE-2025-63701, update the Advantech TP-3250 printer driver to the latest version that addresses this vulnerability.
What is the potential impact of CVE-2025-63701?
The potential impact of CVE-2025-63701 includes the risk of arbitrary code execution and system instability.
Which version of the Advantech TP-3250 printer driver is affected by CVE-2025-63701?
CVE-2025-63701 specifically affects version 0.3.9200.20789 of the Advantech TP-3250 printer driver.
What actions should users take regarding CVE-2025-63701?
Users should immediately assess their systems for the affected printer driver and apply necessary updates to mitigate the risk.