CVE-2025-14232CWE-787

Buffer overflow in XML processing of XPS file in Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment…

Critical · published January 15, 2026

CVSS v4.0
9.3
EPSS
1%
Percentile
59.4
In the wild
Unconfirmed
What it is

🚨 A sneaky buffer overflow lurks in your multifunction printers, and it’s enabling attackers to crash or control them from within your network! 🔥 Think of it like a busy restaurant kitchen where one chef accidentally spills ingredients all over the floor — it can bring the whole place to a halt or let anyone mingle behind the scenes, potentially causing chaos in the kitchen! If exploited, an attacker could render the printer unresponsive or execute arbitrary code, leaving your printing operations in disarray. Imagine printing an important document, only for the printer to suddenly freeze or be hijacked! This could lead to data exposure and disruption of critical workflows.

Put simply

Think of it like a busy restaurant kitchen where one chef accidentally spills ingredients all over the floor — it can bring the whole place to a halt or let anyone mingle behind the scenes, potentially causing chaos in the kitchen! This vulnerability arises from improper handling of XML in XPS files, allowing attackers on the same network segment to trigger a buffer overflow. This could let malicious code run unchecked, putting the printer's integrity at risk.

What to do

If exploited, an attacker could render the printer unresponsive or execute arbitrary code, leaving your printing operations in disarray. Imagine printing an important document, only for the printer to suddenly freeze or be hijacked! This could lead to data exposure and disruption of critical workflows. Patch affected printers to firmware version 06.03 or higher immediately. Ensure proper access controls are in place on your network to limit exposure. Consider implementing network segmentation to protect critical devices from potential threats. You've got this! By following these steps, you'll be on your way to securing your printing environment in no time! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00902 · 59.4th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-01-15T23:36Z
EPSS history
Timeline
  • 15 JAN 23:36Z
    Buffer overflow in XML processing of XPS file in Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment…
    cvelistv5