Fujifilm Warns of Printer and Copier/MFP Security Vulnerability
On August 4th, Fujifilm Business Innovation issued a notice to customers warning them of a security vulnerability for its printers and copier/MFPs. The vulnerability may cause some Fujifilm printers to freeze when processing some specific IPP (Internet Printing Protocol) and LPD (Line Printer Daemon) protocol packets.
More Details
The printer may freeze when some specific IPP and LPD protocol packets are processed.
The issue arises during the data-writing process in the printer’s buffer memory. There is a possibility of failing to validate the length of the data in the existing logic. When data of certain length is received, the data may be written beyond the specified buffer area. (CVE-2025-48499).
Fujifilm advises users to update the printer’s firmware to the latest version, and to use the printer within a network firewall. If a printer freezes, it should be rebooted.
More information can be found here:
Affected Models and Versions and Fixed Firmware Versions
Affected models | Affected firmware versions | Fixed firmware versions |
DocuPrint CP225 w DocuPrint CP228 w | 01.23.02 or earlier | 01.24.00 or later |
DocuPrint CP115 w DocuPrint CP118 w | 01.09.00 or earlier | 01.11.00 or later |
DocuPrint CP116 w DocuPrint CP119 w | 01.09.00 or earlier | 01.11.00 or later |
DocuPrint CM225fw DocuPrint CM228fw | 01.12.02 or earlier | 01.13.00 or later |
DocuPrint CM115 w DocuPrint CM118 w | 01.09.01 or earlier | 01.11.00 or later |
Apoes 2150 N Apoes 2350 NDA Apoes 2150 ND Apoes 2150 NDA | 01.00.47 or earlier | 01.20.50 or later |
You must be logged in to post a comment.