Medium severity · published Sep 29, 2025
CVE-2025-9903
Out-of-bounds write vulnerabilities in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus…
5.9
CVSS
0.4%
EPSS
No
On KEV
Description
Out-of-bounds write vulnerabilities in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus LIPSLX Printer Driver / Generic Plus PS Printer Driver / UFRII LT Printer Driver / CARPS2 Printer Driver / Generic FAX Driver / LIPS4 Printer Driver / LIPSLX Printer Driver / UFR II Printer Driver / PS Printer Driver / PCL6 Printer Driver
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L
Attack vector
Network
Complexity
High
Privileges
None
User interaction
Required
Confidentiality
None
Integrity
High
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 29% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CP
CARPS2 Printer Driver · Canon Inc.
31.05 and earlier · source: vendor
GF
Generic FAX Driver · Canon Inc.
10.67 and earlier · source: vendor
GP
Generic Plus LIPS4 Printer Driver · Canon Inc.
3.30 and earlier · source: vendor
GP
Generic Plus LIPSLX Printer Driver · Canon Inc.
3.30 and earlier · source: vendor
GP
Generic Plus PCL6 Printer Driver · Canon Inc.
3.30 and earlier · source: vendor
GP
Generic Plus PS Printer Driver · Canon Inc.
3.30 and earlier · source: vendor
GP
Generic Plus UFR II Printer Driver · Canon Inc.
3.30 and earlier · source: vendor
LP
LIPS4 Printer Driver · Canon Inc.
15.00 and earlier · source: vendor
LP
LIPSLX Printer Driver · Canon Inc.
15.00 and earlier · source: vendor
PP
PCL6 Printer Driver · Canon Inc.
15.00 and earlier · source: vendor
PP
PS Printer Driver · Canon Inc.
15.00 and earlier · source: vendor
UI
UFR II Printer Driver · Canon Inc.
15.00 and earlier · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-9903
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-9903
canon.jp
https://canon.jp/support/support-info/250925vulnerability-response
psirt.canon
https://psirt.canon/advisory-information/cp2025-005/
www.canon-europe.com
https://www.canon-europe.com/support/product-security/
www.usa.canon.com
https://www.usa.canon.com/about-us/to-our-customers/cp2025-005-vulnerabilities-remediation-for-certain-printer-drivers-for-production-printers-office-small-office-multifunction-printers-laser-printers
More from CARPS2 Printer Driver
9.4
CVE-2025-1268
Out-of-bounds vulnerability in EMF Recode processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus…
5.9
CVE-2025-7698
Out-of-bounds read vulnerabilities in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus…
5.3
CVE-2025-9904
Unallocated memory access vulnerability in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic…