What’s Vulnerable › Vulnerabilities

CVE-2024-12647

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-01-28 · updated 2026-06-17
• Weakness: CWE-787

Description

Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.

Affected products

• Canon Lbp1238 Ii Firmware: through 05.04
• Canon Lbp1440 Firmware: through 05.04
• Canon Lbp236Dw Firmware: through 05.04
• Canon Lbp237Dw Firmware: through 05.04
• Canon Lbp246Dw Firmware: through 05.04
• Canon Lbp247Dw Firmware: through 05.04
• Canon Lbp632Cdw Firmware: through 05.04
• Canon Lbp633Cdw Firmware: through 05.04
• Canon Mf1238 Ii Firmware: through 05.04
• Canon Mf1440 Firmware: through 05.04
• Canon Mf1643I Ii Firmware: through 05.04
• Canon Mf1643If Ii Firmware: through 05.04
• Canon Mf451Dw Firmware: through 05.04
• Canon Mf452Dw Firmware: through 05.04
• Canon Mf453Dw Firmware: through 05.04
• Canon Mf455Dw Firmware: through 05.04
• Canon Mf462Dw Firmware: through 05.04
• Canon Mf465Dw Firmware: through 05.04
• Canon Mf652Cw Firmware: through 05.04
• Canon Mf653Cdw Firmware: through 05.04
• Canon Mf654Cdw Firmware: through 05.04
• Canon Mf656Cdw Firmware: through 05.04

References

• https://canon.jp/support/support-info/250127vulnerability-response
• https://psirt.canon/advisory-information/cp2025-001/
• https://www.canon-europe.com/support/product-security/#news
• https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers

Get alerted when CVE-2024-12647 or the next vulnerability affects your stack