CVE-2025-14233: Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(*) whi
54
This month
CRITICAL 9.8REMOTEUPGRADEUPGRADEUPGRADE
CVE-2025-14233 is a critical-severity flaw (CVSS 9.8) affecting lbp1238 ii firmware, lbp632cdw firmware, lbp633cdw firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 S
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
Published CVE record published
Updated Record last modified
canon lbp1238 ii firmware UPGRADE
Affected: <= 06.02
Fixed in: newer than 06.02
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
canon lbp632cdw firmware UPGRADE
Affected: <= 06.02
Fixed in: newer than 06.02
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
canon lbp633cdw firmware UPGRADE
Affected: <= 06.02
Fixed in: newer than 06.02
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
canon lbp236dw firmware UPGRADE
Affected: <= 06.02
Fixed in: newer than 06.02
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
canon lbp237dw firmware UPGRADE
Affected: <= 06.02
Fixed in: newer than 06.02
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
canon mf1643i ii firmware UPGRADE
Affected: <= 06.02
Fixed in: newer than 06.02
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
Verify at the official sourceNVD · CVE Program · Report a problem with this page Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2025-14233?
lbp1238 ii firmware: upgrade to newer than 06.02; lbp632cdw firmware: upgrade to newer than 06.02; lbp633cdw firmware: upgrade to newer than 06.02. Exact commands for each OS are on this page.
Is CVE-2025-14233 being exploited?
CVE-2025-14233 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2025-14233 affect?
CVE-2025-14233 affects lbp1238 ii firmware, lbp632cdw firmware, lbp633cdw firmware. Severity is critical (CVSS 9.8). Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *
How urgent is CVE-2025-14233?
Priority 54/100. Critical severity; Remotely exploitable, no login, no user action
CVE-2025-14231CRITICAL 9.8UPGRADEUPGRADE Buffer overflow in print job processing by WSD on Small Office Multifunction Printers and Laser Printers(*) wh
PatchTheCVE