ZDI-CAN-28268: ZDI-26-204: (Pwn2Own) Canon imageCLASS MF654Cdw XPS Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability

Published Mar 16, 2026

Updated

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF654Cdw printers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-14232.

Affected Software

1 affected component

Canon imageCLASS MF654Cdw

Event History

Mar 16, 2026

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-28268?

ZDI-CAN-28268 is classified as a critical vulnerability due to its potential for remote code execution.

How do I fix ZDI-CAN-28268?

To fix ZDI-CAN-28268, update the firmware of the Canon imageCLASS MF654Cdw printer to the latest version provided by Canon.

Who is affected by ZDI-CAN-28268?

Users of Canon imageCLASS MF654Cdw printers are affected by the ZDI-CAN-28268 vulnerability.

What type of vulnerability is ZDI-CAN-28268?

ZDI-CAN-28268 is a stack-based buffer overflow vulnerability that allows for remote code execution.

Does ZDI-CAN-28268 require authentication to exploit?

No, ZDI-CAN-28268 can be exploited by network-adjacent attackers without the need for authentication.