InfoSecBulletin Cybersecurity for mankind
Canon has announced a critical security vulnerability, CVE-2025-1268, in printer drivers for its production printers, multifunction printers, and laser printers. This out-of-bounds issue may disrupt printing or allow malicious code execution when processed by a harmful application.
The affected printer drivers include several versions of Canon’s Generic Plus drivers:
Critical cPanel, GitLab AI Gateway and Dell CSM Flaws Enable RCE And Admin Hijacking
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
“InfoSecCon-2026: Bangladesh’s Cybersecurity Leaders Unite to Shape a Safer Digital Future”
Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation
AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage
Generic Plus PCL6 Printer Driver – V3.12 and earlier
Generic Plus UFR II Printer Driver – V3.12 and earlier
Generic Plus LIPS4 Printer Driver – V3.12 and earlier
Generic Plus LIPSLX Printer Driver – V3.12 and earlier
Generic Plus PS Printer Driver – V3.12 and earlier
The flaw is identified by CVE-2025-1268 and affects the EMF Recode processing of Generic Plus printer drivers. It has a critical CVSS score of 9.4.
Canon has thanked the Microsoft Offensive Research and Security Engineering Team (MORSE) for reporting this vulnerability.
Canon is addressing this vulnerability by releasing updated printer drivers. They advise customers to install the latest drivers available on their local Canon sales representatives’ websites to reduce risk.
