CVE-2025-14235CWE-787

Buffer overflow in XPS font fpgm data processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network…

Critical · published January 15, 2026

CVSS v4.0
9.3
EPSS
1%
Percentile
59.4
In the wild
Unconfirmed
What it is

🚨 A sneaky buffer overflow lurking in certain multifunction printers could leave them unresponsive or worse — running arbitrary code! 🔥 Picture a busy restaurant where an overzealous waiter tries to stack too many plates — eventually, the whole stack crashes to the floor! That’s the gist of this buffer overflow, where too much data overloads the system's ability to handle it gracefully. An attacker on the same network segment could exploit this vulnerability to freeze your printer or take control of it completely, compromising sensitive data and disrupting operations. It's like handing over the keys to your office when all you wanted was a printout!

Put simply

Picture a busy restaurant where an overzealous waiter tries to stack too many plates — eventually, the whole stack crashes to the floor! That’s the gist of this buffer overflow, where too much data overloads the system's ability to handle it gracefully. This vulnerability in the font processing (fpgm data) of XPS files allows for a buffer overflow, potentially leading to arbitrary code execution or a denial of service on affected printers with specific firmware versions.

What to do

An attacker on the same network segment could exploit this vulnerability to freeze your printer or take control of it completely, compromising sensitive data and disrupting operations. It's like handing over the keys to your office when all you wanted was a printout! Update your printer firmware to the latest version immediately to close this critical vulnerability. Ensure that only trusted devices are connected to your network to minimize the risk of exploitation. Regularly check for firmware updates as part of your maintenance routine. You've got this! Follow these steps to secure your printers and keep your operations running smoothly! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00902 · 59.4th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-01-15T23:38Z
EPSS history
Timeline
  • 15 JAN 23:38Z
    Buffer overflow in XPS font fpgm data processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network…
    cvelistv5