CVE-2025-14236CWE-787

Buffer overflow in Address Book attribute tag processing on Small Office Multifunction Printers(*) which may allow an attacker on the network segment to…

Critical · published January 15, 2026

CVSS v4.0
9.3
EPSS
1%
Percentile
59.4
In the wild
Unconfirmed
What it is

🔥 A buffer overflow in small office multifunction printers could leave your whole network vulnerable — imagine your printer going on strike and refusing to cooperate! Think of this vulnerability like an overstuffed suitcase at an airport check-in. If you push too much into the bag without properly securing it, it might burst open, spilling everything inside and causing chaos! An attacker on the same network segment could exploit this issue to either freeze the printer, rendering it unresponsive, or even worse, execute arbitrary code. This could lead to unauthorized access, data loss, or disruption of your entire office workflow — absolutely devastating!

Put simply

Think of this vulnerability like an overstuffed suitcase at an airport check-in. If you push too much into the bag without properly securing it, it might burst open, spilling everything inside and causing chaos! This vulnerability arises from improper handling of Address Book attribute tags, leading to a buffer overflow that attackers might exploit to execute code remotely. Affected devices include various models of Small Office Multifunction Printers with firmware versions v06.02 and earlier.

What to do

An attacker on the same network segment could exploit this issue to either freeze the printer, rendering it unresponsive, or even worse, execute arbitrary code. This could lead to unauthorized access, data loss, or disruption of your entire office workflow — absolutely devastating! Immediately upgrade all affected printer firmware to the latest version available. Conduct a thorough audit of your network to ensure these devices are protected behind firewalls and consider segmenting the network to limit access. Regularly check for updates to maintain security. You've got this! Follow these steps and you'll have your printers and your network secured in no time! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00902 · 59.4th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-01-15T23:39Z
EPSS history
Timeline
  • 15 JAN 23:39Z
    Buffer overflow in Address Book attribute tag processing on Small Office Multifunction Printers(*) which may allow an attacker on the network segment to…
    cvelistv5