CVE-2025-14237CWE-787

Buffer overflow in XPS font parse processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to…

Critical · published January 15, 2026

CVSS v4.0
9.3
EPSS
1%
Percentile
61.8
In the wild
Unconfirmed
What it is

🚨 A simple overload is all it takes to crash these printers! A buffer overflow vulnerability lurking in XPS font parsing could leave your multifunction printers completely unresponsive. 🔥 Think of it like a busy restaurant where the kitchen gets flooded with too many orders at once, leading to chaos. Without proper handling, the printers can get overwhelmed and just stop working — or worse, they might serve up something unexpected! An attacker in the same network segment could exploit this vulnerability to trigger a full-blown crash of the printer or even execute arbitrary code. This means your sensitive documents could be at risk, and your printing operations could come to an abrupt halt — absolutely devastating for any business relying on these devices!

Put simply

Think of it like a busy restaurant where the kitchen gets flooded with too many orders at once, leading to chaos. Without proper handling, the printers can get overwhelmed and just stop working — or worse, they might serve up something unexpected! This vulnerability occurs due to improper handling of a buffer in the XPS font parsing process on affected printers, allowing an attacker to manipulate memory allocation. If exploited, it can lead to system crashes or arbitrary code execution within the device's environment.

What to do

An attacker in the same network segment could exploit this vulnerability to trigger a full-blown crash of the printer or even execute arbitrary code. This means your sensitive documents could be at risk, and your printing operations could come to an abrupt halt — absolutely devastating for any business relying on these devices! To mitigate this risk, update your affected printers to the latest firmware version immediately. Ensure you regularly monitor and audit your printer network to prevent unauthorized access. Don't forget to review your network segmentation to limit exposure! You've got this! Follow these steps, and you'll be well on your way to securing your printing environment! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00977 · 61.8th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-01-15T23:40Z
EPSS history
Timeline
  • 15 JAN 23:40Z
    Buffer overflow in XPS font parse processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to…
    cvelistv5