Canon has announced a critical security vulnerability, CVE-2025-1268, in printer drivers for its production printers, multifunction printers, and laser printers. This out-of-bounds issue may disrupt printing or allow malicious code execution when processed by a harmful application.
The affected printer drivers include several versions of Canon’s Generic Plus drivers:
By infosecbulletin
/ Friday , July 11 2025
AMD has revealed four new vulnerabilities that could enable attackers to access sensitive data via timing-based side-channel attacks. These vulnerabilities,...
Read More
By infosecbulletin
/ Thursday , July 10 2025
GitLab has released security updates for its Community Edition (CE) and Enterprise Edition (EE) to fix vulnerabilities that could enable...
Read More
By infosecbulletin
/ Thursday , July 10 2025
A newly found vulnerability (CVE-2025-7206) in the D-Link DIR-825 router firmware version 2.10 poses a significant risk to home and...
Read More
By infosecbulletin
/ Thursday , July 10 2025
Zoom released a security update addressing six newly discovered vulnerabilities in its Workplace, Rooms, and SDK products for Windows, macOS,...
Read More
By infosecbulletin
/ Wednesday , July 9 2025
Jack Dorsey, co-founder of Twitter and Block Head, launched a new peer-to-peer messaging app called Bitchat, which operates solely over...
Read More
By infosecbulletin
/ Wednesday , July 9 2025
Splunk has issued critical security updates for SOAR versions 6.4.0 and 6.4 to fix several vulnerabilities in third-party packages. The...
Read More
By infosecbulletin
/ Wednesday , July 9 2025
Cybersecurity researcher Jeremiah Fowler found an unsecured database with 245,949 records, reported to vpnMentor. It likely belonged to a tax...
Read More
By infosecbulletin
/ Wednesday , July 9 2025
Fortinet has issued a critical patch for a critical vulnerability in its FortiWeb product, a web application firewall commonly used...
Read More
By infosecbulletin
/ Wednesday , July 9 2025
Microsoft's Patch Tuesday in July 2025 is critical, featuring updates for 137 vulnerabilities, including a zero-day in Microsoft SQL Server....
Read More
By infosecbulletin
/ Tuesday , July 8 2025
ThreatFabric researchers have discovered a new sophisticated campaign by the Anatsa banking trojan targeting mobile banking users in the U.S....
Read More
Generic Plus PCL6 Printer Driver – V3.12 and earlier
Generic Plus UFR II Printer Driver – V3.12 and earlier
Generic Plus LIPS4 Printer Driver – V3.12 and earlier
Generic Plus LIPSLX Printer Driver – V3.12 and earlier
Generic Plus PS Printer Driver – V3.12 and earlier
The flaw is identified by CVE-2025-1268 and affects the EMF Recode processing of Generic Plus printer drivers. It has a critical CVSS score of 9.4.
Canon has thanked the Microsoft Offensive Research and Security Engineering Team (MORSE) for reporting this vulnerability.
Canon is addressing this vulnerability by releasing updated printer drivers. They advise customers to install the latest drivers available on their local Canon sales representatives’ websites to reduce risk.