ZDI-CAN-28363: ZDI-26-208: (Pwn2Own) Canon imageCLASS MF654Cdw TTF Parsing Integer Overflow Remote Code Execution Vulnerability

Published Mar 16, 2026

Updated

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF654Cdw printers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-14237.

Affected Software

1 affected component

Canon imageCLASS MF654Cdw

Event History

Mar 16, 2026

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-28363?

ZDI-CAN-28363 has been rated with a high severity level due to its potential to allow remote code execution.

How do I fix ZDI-CAN-28363?

To fix ZDI-CAN-28363, update your Canon imageCLASS MF654Cdw printer firmware to the latest version provided by the manufacturer.

Who is affected by ZDI-CAN-28363?

The vulnerability affects all installations of Canon imageCLASS MF654Cdw printers that have not been patched.

Is authentication required to exploit ZDI-CAN-28363?

No, authentication is not required to exploit ZDI-CAN-28363, making it particularly dangerous.

What can attackers do with ZDI-CAN-28363?

Attackers can execute arbitrary code on affected Canon imageCLASS MF654Cdw printers, potentially leading to a full system compromise.