CVE-2025-14232

CVE-2025-14232 is a critical buffer overflow vulnerability (CVSS 9.8) affecting the XML processing of XPS files in various Canon Small Office Multifunction and Laser Printers. An unauthenticated attacker on the same network segment can exploit this to cause a denial of service or execute arbitrary code on the affected devices. While there is no known active exploitation or public exploit code, the vulnerability has garnered some community discussion, indicating awareness. Organizations should prioritize patching these devices to mitigate the significant risk posed by this flaw.