CVE-2025-14233CWE-763

Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment…

Critical · published January 15, 2026

CVSS v4.0
9.3
EPSS
1%
Percentile
57.1
In the wild
Unconfirmed
What it is

🚨 Network printers could become your worst enemy! An invalid free vulnerability in certain multifunction printers allows attackers to take control with just a crafty packet. 🔥 Think of it like a coffee machine in an office that can start brewing coffee on its own — if someone knows how to tamper with the machine and push the right buttons, it could lead to a mess (or worse) for everyone nearby! If an attacker exploits this vulnerability, they could cause the printer to freeze up or, even scarier, run arbitrary code, leading to breaches or disruption of services. It's like leaving your office door wide open while a thief walks right in!

Put simply

Think of it like a coffee machine in an office that can start brewing coffee on its own — if someone knows how to tamper with the machine and push the right buttons, it could lead to a mess (or worse) for everyone nearby! The flaw lies in how the printer handles CPCA file deletion processing, allowing an attacker within the network segment to trigger unexpected behavior or execute malicious code remotely.

What to do

If an attacker exploits this vulnerability, they could cause the printer to freeze up or, even scarier, run arbitrary code, leading to breaches or disruption of services. It's like leaving your office door wide open while a thief walks right in! To protect yourself, immediately update the firmware on affected models to the latest version. Ensure that only trusted users can access your network, and consider setting up additional security measures like VLANs to segment traffic. You've got this! Secure your printers, and they'll be working hard for you again in no time! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00831 · 57.1th percentile
Weakness
CWE-763 · Release of Invalid Pointer or Reference
Published
2026-01-15T23:37Z
EPSS history
Timeline
  • 15 JAN 23:37Z
    Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment…
    cvelistv5