CVE-2024-12648 Memory corruption in Color imageCLASS LBP632Cdw

Critical 9.8 Published 28 Jan 2025 Updated 28 Jan 2025

A buffer overflow in TIFF EXIF processing allows network attackers to execute arbitrary code or cause denial of service on affected Canon printers.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2024-12648?

CVE-2024-12648 is a critical memory corruption vulnerability in Canon Inc. Color imageCLASS LBP632Cdw, published on 28 Jan 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Buffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.

Weakness: CWE-787

Which versions are affected by CVE-2024-12648?

It affects 22 products.

Products include Canon Lbp1238 Ii Firmware, Canon Lbp1440 Firmware, Canon Lbp236dw Firmware, Canon Lbp237dw Firmware, Canon Lbp246dw Firmware, Canon Lbp247dw Firmware and 16 more.

How do I fix CVE-2024-12648?

No fix has been published for CVE-2024-12648 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2024-12648 being exploited?

There is no known exploitation of CVE-2024-12648 in the wild and no public exploit code.

Sources

Also known as GHSA-9cwq-g8xg-jgrg.