VulnSocial

CVE-2025-14233General(canon / lbp1238_ii)

LOWCVSS 9.3 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.

canon CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-763

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • lbp1238_ii
  • lbp1238_ii_firmware
  • lbp236dw
  • lbp236dw_firmware

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • General: 1 classified signal
  • Exploit: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-03-23); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
canon
Products
lbp1238_iilbp1238_ii_firmwarelbp236dwlbp236dw_firmwarelbp237dwlbp237dw_firmwarelbp632cdwlbp632cdw_firmwarelbp633cdwlbp633cdw_firmware

1 version affected across 32 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-03-23: 1Mentions · 2026-08-21: 1Technical Details · 2026-08-21: 103-2308-21
Signal classification2 categories
General
150.0%
Exploit
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-03-231
General1
2026-08-211
Exploit1
Full discourse2 posts
  • astronaut0703@xurxx1e
    Exploit

    https://astronaut0703.github.io/posts/pwn2own-2025-canon-printer-review/ Reviewed the Pwn2Own 2025 Canon printer hack (CVE-2025-14233): how calling free() N times instead of once led all the way to RCE — plus my take and open questions. #Pwn2Own #CVE_2025_14233 #embedded #RTOS #Canon

    Post summary

    The post reviews CVE‑2025‑14233, explaining how repeated free() calls cause RCE, but it offers no PoC, patch, or evidence of active exploitation.

    1000063
    5 followersView on X
  • SystemTek - Technology news website@SystemTek_UK
    General

    Canon imageCLASS MF654Cdw BJNP Memory Corruption Remote Code Execution Vulnerability (CVE-2025-14233) #Canon #CVE202514233 #CyberSecurity #RemoteCodeExecutionVulnerability https://www.systemtek.co.uk/?p=48844 https://t.co/X61AgRjAv4

    Post summary

    The tweet simply announces a new CVE‑2025‑14233 for Canon imageCLASS MF654Cdw, noting a memory corruption remote code execution flaw, but provides no further technical detail, PoC, or mitigation information.

    0000066
    1.8K followersView on X
CPE platform detail32 entries

32 of 32 entries

PartVendorProductVersionTarget SWTarget HW
HWcanonlbp1238_ii---
OScanonlbp1238_ii_firmware---
HWcanonlbp236dw---
OScanonlbp236dw_firmware---
HWcanonlbp237dw---
OScanonlbp237dw_firmware---
HWcanonlbp632cdw---
OScanonlbp632cdw_firmware---
HWcanonlbp633cdw---
OScanonlbp633cdw_firmware---
HWcanonmf1238_ii---
OScanonmf1238_ii_firmware---
HWcanonmf1643i_ii---
OScanonmf1643i_ii_firmware---
HWcanonmf1643if_ii---
OScanonmf1643if_ii_firmware---
HWcanonmf451dw---
OScanonmf451dw_firmware---
HWcanonmf452dw---
OScanonmf452dw_firmware---
HWcanonmf453dw---
OScanonmf453dw_firmware---
HWcanonmf455dw---
OScanonmf455dw_firmware---
HWcanonmf652cdw---
OScanonmf652cw_firmware---
HWcanonmf653cdw---
OScanonmf653cdw_firmware---
HWcanonmf654cdw---
OScanonmf654cdw_firmware---
HWcanonmf656cdw---
OScanonmf656cdw_firmware---

Explore more

Back to dashboardcanon CVEslbp1238_ii vulnerabilities