CVE-2024-12649: Canon LBP1238 Ii Firmware

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Buffer overflow in XPS data font processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.

Affected products

• Canon LBP1238 Ii Firmware: up to and including 05.04
• Canon LBP1440 Firmware: up to and including 05.04
• Canon LBP236DW Firmware: up to and including 05.04
• Canon LBP237DW Firmware: up to and including 05.04
• Canon LBP246DW Firmware: up to and including 05.04
• Canon LBP247DW Firmware: up to and including 05.04
• Canon LBP632CDW Firmware: up to and including 05.04
• Canon LBP633CDW Firmware: up to and including 05.04
• Canon MF1238 Ii Firmware: up to and including 05.04
• Canon MF1440 Firmware: up to and including 05.04
• Canon MF1643I Ii Firmware: up to and including 05.04
• Canon MF1643IF Ii Firmware: up to and including 05.04
• Canon MF451DW Firmware: up to and including 05.04
• Canon MF452DW Firmware: up to and including 05.04
• Canon MF453DW Firmware: up to and including 05.04
• Canon MF455DW Firmware: up to and including 05.04
• Canon MF462DW Firmware: up to and including 05.04
• Canon MF465DW Firmware: up to and including 05.04
• Canon MF652CW Firmware: up to and including 05.04
• Canon MF653CDW Firmware: up to and including 05.04
• Canon MF654CDW Firmware: up to and including 05.04
• Canon MF656CDW Firmware: up to and including 05.04

Published 2025-01-28. Last modified 2026-06-17.