Canon Group
Close Close
Menu Menu Close Close Search

Regarding vulnerability measure against buffer overflow for Laser Printers and Small Office Multifunction Printers

21st February 2025

Multiple cases of buffer overflow vulnerabilities have been confirmed for Canon Laser Printers and Small Office Multifunction Printers (Refer to affected models shown below).
  (CVE-2024-12647/12648/12649)

This vulnerability suggest the possibility that if a product is connected directly to the Internet without using a wired or Wi-Fi router, a third party on the Internet may execute arbitrary code or the product could be subjected to Denial-of Service (DoS) attack.

We have not received any report of damage up to date.

For the safety of your products, please update the firmware of the affected products to the latest version.

At the same time, do not connect directly to the Internet. Instead, set a private IP address on a secure private network configured via firewall product or a wired/Wi-Fi router.

For details, please refer to the following link.

We will work to further strengthen security measures to ensure that customers can continue using Canon products with peace of mind.


Affected Products:

Product Name CVE-2024-12647 CVE-2024-12648 CVE-2024-12649 Countermeasure firmware version
IR1643IFII v05.07

As soon as we confirm the vulnerability of other products, we will inform you immediately on this page.






Share this page