CVE-2024-12649CWE-787

Buffer overflow in XPS data font processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to…

Critical · published January 28, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
68.0
In the wild
Unconfirmed
What it is

🔥 A sneaky buffer overflow in certain printers could turn them into unresponsive paperweights or worse! Think of it like a printer trying to process an oversized file — it jams, causes chaos, and might even throw a tantrum, just like your favorite coffee machine when it’s overloaded! An attacker on the same network segment could exploit this vulnerability to crash the printer or execute arbitrary code, leading to potential data breaches or even disrupting office operations. This could be absolutely devastating for any organization relying heavily on their printing infrastructure!

Put simply

Think of it like a printer trying to process an oversized file — it jams, causes chaos, and might even throw a tantrum, just like your favorite coffee machine when it’s overloaded! This buffer overflow occurs during XPS data font processing, allowing an attacker to send specially crafted data to the printer, causing it to overflow the buffer and leading to unpredictable behavior.

What to do

An attacker on the same network segment could exploit this vulnerability to crash the printer or execute arbitrary code, leading to potential data breaches or even disrupting office operations. This could be absolutely devastating for any organization relying heavily on their printing infrastructure! Immediately update your printer firmware to at least version 05.05, as the earlier versions are vulnerable. Ensure network segmentation is in place and consider disabling unused network interfaces for added protection. You've got this! Secure your printers today and keep your network safe! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01202 · 68.0th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-01-28T00:39Z
EPSS history
Timeline
  • 28 JAN 00:39Z
    Buffer overflow in XPS data font processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to…
    cvelistv5