ZDI-26-207: (Pwn2Own) Canon imageCLASS MF654Cdw dtdc_addr_importSub Stack-based Buffer Overflow Remote Code Execution Vulnerability

Published Mar 16, 2026

Updated

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF654Cdw printers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-14236.

Affected Software

1 affected component

Canon imageCLASS MF654Cdw

Event History

Mar 16, 2026

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-26-207?

ZDI-26-207 is classified as a critical vulnerability due to its ability to allow remote code execution without authentication.

How do I fix ZDI-26-207?

To mitigate ZDI-26-207, update the Canon imageCLASS MF654Cdw printer firmware to the latest version provided by Canon.

Who is affected by ZDI-26-207?

Anyone using the Canon imageCLASS MF654Cdw printer is potentially affected by the ZDI-26-207 vulnerability.

Can ZDI-26-207 be exploited remotely?

Yes, ZDI-26-207 can be exploited by network-adjacent attackers to execute arbitrary code on the printer.

Is authentication required to exploit ZDI-26-207?

No, authentication is not required to exploit the ZDI-26-207 vulnerability.