CVE-2025-1268

CriticalCVSS 9.4/10Last modified Jun 17, 2026

Description

Out-of-bounds vulnerability in EMF Recode processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus LIPSLX Printer Driver / Generic Plus PS Printer Driver / Generic FAX Printer Driver / UFRII LT Printer Driver / CARPS2 Printer Driver / PDF Driver / LIPS4 Printer Driver / LIPSLX Printer Driver / UFR II Printer Driver / PS Printer Driver / PCL6 Printer Driver

Metrics

CVSS 3.1 9.4/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Weakness enumeration

Affected software

VendorProductVersions
Canon Inc.Generic Plus PCL6 Printer Driver3.12 and earlier
Canon Inc.Generic Plus UFR II Printer Driver3.12 and earlier
Canon Inc.Generic Plus LIPS4 Printer Driver3.12 and earlier
Canon Inc.Generic Plus LIPSLX Printer Driver3.12 and earlier
Canon Inc.Generic Plus PS Printer Driver3.12 and earlier
Canon Inc.Generic FAX Printer Driver10.65 and earlier
Canon Inc.UFRII LT Printer Driver30.88 and earlier
Canon Inc.CARPS2 Printer Driver31.01 and earlier
Canon Inc.PDF Driver1.0.5.0 and earlier
Canon Inc.LIPS4 Printer Driver15.00 and earlier
Canon Inc.LIPSLX Printer Driver15.00 and earlier
Canon Inc.UFR II Printer Driver15.00 and earlier
Canon Inc.PS Printer Driver15.00 and earlier
Canon Inc.PCL6 Printer Driver15.00 and earlier

References

Timeline

Published
Mar 31, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-126804.9Brocade SANnav before Brocade SANnav 2.4.0b logs database passwords in clear text in the standby SANnav server, after disaster recovery failCVE-2025-126815.3The Comment Edit Core – Simple Comment Editing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, aCVE-2025-126829.8The Easy Upload Files During Checkout plugin for WordPress is vulnerable to arbitrary JavaScript file uploads due to missing file type validCVE-2025-126835.8The service employed by Everything, running as SYSTEM, communicates with the lower privileged Everything GUI via a named pipe. The named pipCVE-2025-126847.1The URL Shortify WordPress plugin before 1.11.3 does not sanitize and escape a parameter before outputting it back in the page, leading to CVE-2025-126856.5The WPBookit WordPress plugin through 1.0.7 lacks a CSRF check when deleting customers. This could allow an unauthenticated attacker to deleCVE-2025-126869.8Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in AdminCenter in Synology BeeStation OS before 1.3.2-6CVE-2025-126876.5A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for WindowsCVE-2025-126896.5Mattermost versions 11.0.x <= 11.0.4, 10.12.x <= 10.12.2, 10.11.x <= 10.11.6 fail to check WebSocket request field for proper UTF-8 format, CVE-2025-12694.8URL Redirection to Untrusted Site ('Open Redirect') vulnerability in HAVELSAN Liman MYS allows Cross-Site Flashing. This issue affects LimaCVE-2025-126907.8Execution with unnecessary privileges in Forcepoint NGFW Engine allows local privilege escalation.This issue affects NGFW Engine through 6.1CVE-2025-126916.4The Photonic Gallery & Lightbox for Flickr, SmugMug & Others plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugi
CVE-2025-1268: Critical severity, CVSS 9.4 | Vulnix