CVE-2025-1268
Patch urgently! Canon Fixes Critical Printer Driver Flaw

Canon has announced a critical security vulnerability, CVE-2025-1268, in printer drivers for its production printers, multifunction printers, and laser printers. This out-of-bounds issue may disrupt printing or allow malicious code execution when processed by a harmful application.

The affected printer drivers include several versions of Canon’s Generic Plus drivers:

• Alert
• Cyber Attack

ISPAB president “whatsapp” got hacked via phishing link

By infosecbulletin / Wednesday , April 23 2025

Imdadul Haque, the president of Internet Service Provider of Bangladesh (ISPAB) said, I automatically got back my WhatsApp account. What...

Read More

• Alert
• Vulnerabilities

Zyxel released patches 2 vulns in its USG FLEX H series firewalls

By infosecbulletin / Wednesday , April 23 2025

Zyxel Networks has issued critical security patches for two high-severity vulnerabilities in its USG FLEX H series firewalls. These flaws...

Read More

• Data Breach
• Hot Topic

South Korea’s largest SK Telecom Hit by Malware: SIM-related info leaked

By infosecbulletin / Wednesday , April 23 2025

South Korea's largest mobile operator, SK Telecom, is warning that a malware infection allowed threat actors to access sensitive USIM-related...

Read More

• Alert

ChatGPT Develops Exploit for CVEs Before Public PoCs Share

By infosecbulletin / Wednesday , April 23 2025

Security researcher Matt Keeley showed that artificial intelligence can now develop working exploits for critical vulnerabilities before public proof-of-concept (PoC)...

Read More

• Alert
• Vulnerabilities

TP-Link Router Vulns Allow to Execute Malicious SQL Commands

By infosecbulletin / Tuesday , April 22 2025

Several vulnerabilities have been found in TP-Link routers, exposing users to serious security risks from SQL injection flaws in their...

Read More

• Alert
• Hot Topic

SSL.com’s domain validation system’s bug found: Hacker exploited

By infosecbulletin / Tuesday , April 22 2025

SSL.com has revealed a major security flaw in its domain validation system, which could enable attackers to acquire fake SSL...

Read More

• International

Amazon Follows Microsoft’s Lead, Halts Some Data Center Deals

By infosecbulletin / Tuesday , April 22 2025

Amazon has paused some data center lease negotiations for its cloud division, particularly in international markets, according to Wells Fargo...

Read More

• Alert
• Cyber Attack

Hackers Exploit Zoom’s Remote Control Feature for System Access

By infosecbulletin / Monday , April 21 2025

ELUSIVE COMET is a threat actor conducting a sophisticated attack campaign that uses Zoom's remote control feature to access victims'...

Read More

• Event

Registration open for ‘𝐔𝐀𝐏 𝐂𝐘𝐁𝐄𝐑 𝐒𝐈𝐄𝐆𝐄 𝟐𝟎𝟐𝟓’

By infosecbulletin / Monday , April 21 2025

𝐓𝐡𝐞 𝐂𝐲𝐛𝐞𝐫 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐂𝐥𝐮𝐛 of University of Asia Pacific (UAP) is going to arrange ‘𝐔𝐀𝐏 𝐂𝐘𝐁𝐄𝐑 𝐒𝐈𝐄𝐆𝐄 𝟐𝟎𝟐𝟓’ 𝐂𝐚𝐩𝐭𝐮𝐫𝐞 𝐓𝐡𝐞...

Read More

• Alert
• Vulnerabilities

Samsung phone is saving your passwords in plain text

By infosecbulletin / Sunday , April 20 2025

You copy a password from your manager, thinking it's safe. Meanwhile, your phone is saving it in plain text. Samsung...

Read More

Generic Plus PCL6 Printer Driver – V3.12 and earlier
Generic Plus UFR II Printer Driver – V3.12 and earlier
Generic Plus LIPS4 Printer Driver – V3.12 and earlier
Generic Plus LIPSLX Printer Driver – V3.12 and earlier
Generic Plus PS Printer Driver – V3.12 and earlier

The flaw is identified by CVE-2025-1268 and affects the EMF Recode processing of Generic Plus printer drivers. It has a critical CVSS score of 9.4.

Canon has thanked the Microsoft Offensive Research and Security Engineering Team (MORSE) for reporting this vulnerability.

Canon is addressing this vulnerability by releasing updated printer drivers. They advise customers to install the latest drivers available on their local Canon sales representatives’ websites to reduce risk.