CVE-2024-12649

CVE-2024-12649 is a critical buffer overflow vulnerability (CWE-787) in the XPS data font processing of specific Canon Small Office Multifunction and Laser Printers, including models sold in Japan, the US, and Europe with firmware v05.04 and earlier. This flaw allows an unauthenticated attacker on the same network segment to remotely trigger a denial-of-service condition or execute arbitrary code. With a CVSS score of 9.8 (CRITICAL), the vulnerability presents a significant risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.