CVE-2025-14234CWE-787

Buffer overflow in CPCA list processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to…

Critical · published January 15, 2026

CVSS v4.0
9.3
EPSS
1%
Percentile
59.4
In the wild
Unconfirmed
What it is

🔥 Printer panic alert! A buffer overflow in certain multifunction printers could render them unresponsive or worse—allow an attacker to execute arbitrary code directly! Think of this vulnerability as a crowded elevator that suddenly stops functioning; if it’s overloaded, it can cause a chaotic standstill. Just like an elevator needs to manage its weight capacity, these printers must manage their buffer sizes to avoid crashing. If exploited, an attacker on the same network segment could cause these printers to freeze or take control of them completely. This could lead to unauthorized access to sensitive documents, manipulation of print jobs, or even broader network disruptions! That's absolutely devastating for any business relying on these devices.

Put simply

Think of this vulnerability as a crowded elevator that suddenly stops functioning; if it’s overloaded, it can cause a chaotic standstill. Just like an elevator needs to manage its weight capacity, these printers must manage their buffer sizes to avoid crashing. This vulnerability allows an attacker to exploit a buffer overflow during list processing, leading to potential denial-of-service or remote code execution. Specifically, the flaw resides in the firmware of several printer models, including the Satera and imageCLASS series, versions 06.02 and earlier.

What to do

If exploited, an attacker on the same network segment could cause these printers to freeze or take control of them completely. This could lead to unauthorized access to sensitive documents, manipulation of print jobs, or even broader network disruptions! That's absolutely devastating for any business relying on these devices. Immediately update the firmware of affected models to the latest version provided by the manufacturer. If your printer is on this list, don’t wait—patch it up to ensure your network security! Regularly check for firmware updates moving forward. You’re on the front lines of security! With these steps, you can lock down those printers and keep your network safe. You've got this! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00902 · 59.4th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-01-15T23:38Z
EPSS history
Timeline
  • 15 JAN 23:38Z
    Buffer overflow in CPCA list processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to…
    cvelistv5