FUJIFILM Business Innovation MFPs Out-of-Bounds Write Vulnerability Leading to Denial-of-Service

An out-of-bounds write vulnerability has been identified in certain multifunction printers (MFPs) from FUJIFILM Business Innovation Corp. Affected models include various DocuPrint and Apeos series printers. This vulnerability allows a specially crafted Internet Printing Protocol (IPP) or Line Printer Daemon (LPD) packet to cause a denial-of-service condition on the printer. The printer may freeze and require a manual reset to recover.

Impact

Exploitation of this vulnerability causes the printer to freeze, creating a denial-of-service condition that requires a reboot to resolve.

Remediation

Users are advised to update the printer's firmware to the latest version. FUJIFILM has published a notification regarding this vulnerability and the available firmware updates on their official website.