CVE-2023-0855

CVE-2023-0855 is a critical buffer overflow vulnerability affecting Canon Office/Small Office Multifunction Printers and Laser Printers, specifically various LBP and MF series models with firmware version 11.04 and earlier. An unauthenticated attacker on the same network segment can exploit this flaw via the IPP number-up attribute process, potentially leading to denial of service or arbitrary code execution. With a CVSS score of 9.8 (Critical), it presents a high risk due to its network-based attack vector and lack of user interaction. Despite its severity, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.