CVE-2025-14234

CVE-2025-14234 is a critical buffer overflow vulnerability (CWE-787) affecting CPCA list processing in various Canon Small Office Multifunction and Laser Printers, including specific Satera, Color imageCLASS, and i-SENSYS models with firmware v06.02 and earlier. An unauthenticated attacker on the network segment can exploit this to cause denial of service or execute arbitrary code. With a CVSS score of 9.8 (CRITICAL), this vulnerability poses a high risk due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation (KEV: No) and no public exploit code (Metasploit, Nuclei, ExploitDB: None), the vulnerability has garnered significant community discussion with 12 mentions, indicating awareness among security researchers.