Generic Plus Printer Driver Out-of-Bounds Read/Write & DoS Vulnerabilities (CVE-2025-7698/9903/9904)

Key Information Vulnerability Description Issue: Multiple vulnerabilities have been identified in printer drivers for certain production printers, office/small office multifunction printers, and laser printers. These vulnerabilities may allow out-of-bounds memory access and/or denial-of-service (DoS) attacks when printing is processed by malicious applications. Affected Printer Drivers Generic Plus PCL6 Printer Driver - Versions V3.30 and earlier Generic Plus UFR II Printer Driver - Versions V3.30 and earlier Generic Plus LIPS4 Printer Driver - Versions V3.30 and earlier Generic Plus LIPSLX Printer Driver - Versions V3.30 and earlier Generic Plus PS Printer Driver - Versions V3.30 and earlier Mitigation Customers are advised to install the latest versions of the printer drivers: - Generic Plus PCL6 Printer Driver - Version V3.31 and later - Generic Plus UFR II Printer Driver - Version V3.31 and later - Generic Plus LIPS4 Printer Driver - Version V3.31 and later - Generic Plus LIPSLX Printer Driver - Version V3.31 and later - Generic Plus PS Printer Driver - Version V3.31 and later CVE/CVSS CVE-2025-7698: Out-of-bounds read vulnerability during print processing, CVSS v4 Base Score: 5.9, CVSS v3 Base Score: 5.9 CVE-2025-9903: Out-of-bounds write vulnerability during print processing, CVSS v4 Base Score: 5.9, CVSS v3 Base Score: 5.9 CVE-2025-9904: Uninitialized memory access vulnerability during print processing, CVSS v4 Base Score: 6.9, CVSS v3 Base Score: 5.3 Acknowledgments Thank you to Microsoft Offensive Research and Security Engineering Team (MORSE) for reporting the out-of-bounds read vulnerability in CVE-2025-7698.

Goal Reached Thanks to every supporter — we hit 100%!

Generic Plus Printer Driver Out-of-Bounds Read/Write & DoS Vulnerabilities (CVE-2025-7698/9903/9904)