ZDI-26-208: (Pwn2Own) Canon imageCLASS MF654Cdw TTF Parsing Integer Overflow Remote Code Execution Vulnerability

Published Mar 16, 2026

Updated

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF654Cdw printers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-14237.

Affected Software

1 affected component

Canon imageCLASS MF654Cdw

Event History

Mar 16, 2026

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-26-208?

The severity of ZDI-26-208 is high due to its potential for remote code execution.

How do I fix ZDI-26-208?

To fix ZDI-26-208, it is recommended to update the Canon imageCLASS MF654Cdw printer to the latest firmware provided by Canon.

What systems are affected by ZDI-26-208?

ZDI-26-208 specifically affects the Canon imageCLASS MF654Cdw printer.

Can ZDI-26-208 be exploited remotely?

Yes, ZDI-26-208 can be exploited remotely by network-adjacent attackers without authentication.

What type of vulnerability is ZDI-26-208?

ZDI-26-208 is an integer overflow vulnerability that can lead to remote code execution.