CVE-2025-1268CWE-787

Out-of-bounds vulnerability in EMF Recode processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer…

Critical · published March 31, 2025

CVSS v3.1
9.4
EPSS
1%
Percentile
56.3
In the wild
Unconfirmed
What it is

🔥 An out-of-bounds vulnerability in several Generic Plus printer drivers could allow an attacker to execute malicious code — it’s like giving a hacker the keys to your printing press! Think of it as a delivery driver who misinterprets an address and delivers sensitive documents to any random location instead of the intended recipient — that’s how easy it can be for attackers to exploit this flaw! An attacker could potentially gain full control over the affected system, leading to data theft or even deploying malware. This could result in critical breaches, putting sensitive information and operations at serious risk. It's absolutely devastating!

Put simply

Think of it as a delivery driver who misinterprets an address and delivers sensitive documents to any random location instead of the intended recipient — that’s how easy it can be for attackers to exploit this flaw! This out-of-bounds vulnerability occurs during EMF Recode processing in various Generic Plus printer drivers, which can allow attackers to execute arbitrary code by sending specially crafted print jobs.

What to do

An attacker could potentially gain full control over the affected system, leading to data theft or even deploying malware. This could result in critical breaches, putting sensitive information and operations at serious risk. It's absolutely devastating! Update all affected printer drivers to the latest versions immediately to patch this vulnerability. Review your printing system configurations and ensure that only trusted users have access to print jobs. Regularly monitor any anomalous print activity for further protection. 🛡️ You've got this! Stay proactive, follow these steps, and keep your printing environment secure! 🚀

The record
Technical detail
CVSS v3.1
9.4 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00806 · 56.3th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-03-31T00:52Z
EPSS history
Timeline
  • 31 MAR 00:52Z
    Out-of-bounds vulnerability in EMF Recode processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer…
    cvelistv5