Canon MF653CDW Firmware vulnerabilities

10 CVEs affecting Canon MF653CDW Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-14237, published 2026-01-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-12649, published 2025-01-28. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Buffer overflow in XPS data font processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being…
CVE-2024-12647, published 2025-01-28. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being…
CVE-2024-12648, published 2025-01-28. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Buffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being…
CVE-2025-14237, published 2026-01-16. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. Buffer overflow in XPS font parse processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being…
CVE-2025-14236, published 2026-01-16. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Buffer overflow in Address Book attribute tag processing on Small Office Multifunction Printers(*) which may allow an attacker on the network segment to trigger the affected product being…
CVE-2025-14235, published 2026-01-16. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Buffer overflow in XPS font fpgm data processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being…
CVE-2025-14234, published 2026-01-16. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Buffer overflow in CPCA list processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being…
CVE-2025-14232, published 2026-01-16. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Buffer overflow in XML processing of XPS file in Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being…
CVE-2025-14231, published 2026-01-16. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Buffer overflow in print job processing by WSD on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being…
CVE-2025-14233, published 2026-01-16. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being…