InfoSecBulletin Cybersecurity for mankind
Canon has announced a critical security vulnerability, CVE-2025-1268, in printer drivers for its production printers, multifunction printers, and laser printers. This out-of-bounds issue may disrupt printing or allow malicious code execution when processed by a harmful application.
The affected printer drivers include several versions of Canon’s Generic Plus drivers:
Daily Cyber security update for 14.11. 2026
Huge European telecom leak exposes clients of Swedbank, SEB, airBaltic, and other companies
PHP2Shell attack exploited a Check Point 0-day to deploy malware
North Korean hackers steal more than $400 million using video images, FBI says
Microsoft’s November 2026 Patch Tuesday addresses 1,093 flaws, with Outlook zero-day
Barracuda ESG flaws exploited, gaining root access
Apple, SAP, and Ivanti Patch Critical flaws Affecting Messaging, Bluetooth, and Enterprise Systems
Jailbroken DeepSeek AI Agent Conducts Two-Week Cyberattack on European Telecom
Daily Cyber security update for 10.11. 2026
IBM fixes 208 API Connect vulnerabilities, 47 critical
Generic Plus PCL6 Printer Driver – V3.12 and earlier
Generic Plus UFR II Printer Driver – V3.12 and earlier
Generic Plus LIPS4 Printer Driver – V3.12 and earlier
Generic Plus LIPSLX Printer Driver – V3.12 and earlier
Generic Plus PS Printer Driver – V3.12 and earlier
The flaw is identified by CVE-2025-1268 and affects the EMF Recode processing of Generic Plus printer drivers. It has a critical CVSS score of 9.4.
Canon has thanked the Microsoft Offensive Research and Security Engineering Team (MORSE) for reporting this vulnerability.
Canon is addressing this vulnerability by releasing updated printer drivers. They advise customers to install the latest drivers available on their local Canon sales representatives’ websites to reduce risk.
