CVE-2025-9904 Vulnerability Details

Record summary

CVE-2025-9904 has a selected CVSS score of 6.9 (medium).

Description

Unallocated memory access vulnerability in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus LIPSLX Printer Driver / Generic Plus PS Printer Driver / UFRII LT Printer Driver / CARPS2 Printer Driver / Generic FAX Driver / LIPS4 Printer Driver / LIPSLX Printer Driver / UFR II Printer Driver / PS Printer Driver / PCL6 Printer Driver

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone

AutomatableYes

Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 29, 2025 · Source: CVE List

Affected products and versions

Showing 12 of 13

Product	Source	Version range	Status
CARPS2 Printer Driver Browse Canon Inc. / CARPS2 Printer Driver Default status: unaffected	CVE List	31.05 and earlier	affected
Generic FAX Driver Browse Canon Inc. / Generic FAX Driver Default status: unaffected	CVE List	10.67 and earlier	affected
Generic Plus LIPS4 Printer Driver Browse Canon Inc. / Generic Plus LIPS4 Printer Driver Default status: unaffected	CVE List	3.30 and earlier	affected
Generic Plus LIPSLX Printer Driver Browse Canon Inc. / Generic Plus LIPSLX Printer Driver Default status: unaffected	CVE List	3.30 and earlier	affected
Generic Plus PCL6 Printer Driver Browse Canon Inc. / Generic Plus PCL6 Printer Driver Default status: unaffected	CVE List	3.30 and earlier	affected
Generic Plus PS Printer Driver Browse Canon Inc. / Generic Plus PS Printer Driver Default status: unaffected	CVE List	3.30 and earlier	affected
Generic Plus UFR II Printer Driver Browse Canon Inc. / Generic Plus UFR II Printer Driver Default status: unaffected	CVE List	3.30 and earlier	affected
LIPS4 Printer Driver Browse Canon Inc. / LIPS4 Printer Driver Default status: unaffected	CVE List	15.00 and earlier	affected
LIPSLX Printer Driver Browse Canon Inc. / LIPSLX Printer Driver Default status: unaffected	CVE List	15.00 and earlier	affected
PCL6 Printer Driver Browse Canon Inc. / PCL6 Printer Driver Default status: unaffected	CVE List	15.00 and earlier	affected
PS Printer Driver Browse Canon Inc. / PS Printer Driver Default status: unaffected	CVE List	15.00 and earlier	affected
UFR II Printer Driver Browse Canon Inc. / UFR II Printer Driver Default status: unaffected	CVE List	15.00 and earlier	affected

References

canon.jpVendor advisory

https://canon.jp/support/support-info/250925vulnerability-response

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2025-9904

psirt.canonVendor advisory

https://psirt.canon/advisory-information/cp2025-005

canon-europe.comVendor advisory

https://www.canon-europe.com/support/product-security

usa.canon.comVendor advisory

https://www.usa.canon.com/about-us/to-our-customers/cp2025-005-vulnerabilities-remediation-for-certain-printer-drivers-for-production-printers-office-small-office-multifunction-printers-laser-printers