CVE-2024-12647CWE-787

Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network…

Critical · published January 28, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
68.0
In the wild
Unconfirmed
What it is

🔥 A buffer overflow lurking in your office printer is a recipe for disaster! Think of it like overloading a power strip with too many devices; eventually, it can get overloaded and short out! This vulnerability in CPCA font processing means that too much data can make your printer go haywire or even let attackers run wild on your network. An attacker on the same network segment could exploit this flaw to cause your printer to become unresponsive or, even worse, execute arbitrary code! Imagine your printer suddenly deciding to print a thousand copies of a confidential document or being used as a gateway to infiltrate your entire network — absolutely terrifying!

Put simply

Think of it like overloading a power strip with too many devices; eventually, it can get overloaded and short out! This vulnerability in CPCA font processing means that too much data can make your printer go haywire or even let attackers run wild on your network. This buffer overflow in the CPCA font download processing allows for excessive data to be inserted into memory, leading to crashes or unauthorized code execution on affected printers, specifically those with firmware v05.04 and earlier.

What to do

An attacker on the same network segment could exploit this flaw to cause your printer to become unresponsive or, even worse, execute arbitrary code! Imagine your printer suddenly deciding to print a thousand copies of a confidential document or being used as a gateway to infiltrate your entire network — absolutely terrifying! Patch your printers immediately to the latest firmware version available. Ensure you're using firmware version greater than 05.04 and limit network access to your printers as an additional precaution. Regularly check for updates to keep your devices secure! You can tackle this! Stay proactive and patch those printers to keep your network safe! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01202 · 68.0th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-01-28T00:38Z
EPSS history
Timeline
  • 28 JAN 00:38Z
    Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network…
    cvelistv5