This vulnerability, identified as CWE-763 (Release of Invalid Pointer or Reference), occurs in the CPCA file deletion process of Canon Satera LBP670C Series and other related printer models. An invalid free operation can be triggered by an attacker on the same network segment, potentially causing the device to become unresponsive or enabling arbitrary code execution. The affected firmware versions are 06.02 and earlier. The vulnerability has a CVSS 4.0 score of 9.3, reflecting its critical nature with network attack vector and no required privileges or user interaction. Multiple printer models across Japan, US, and Europe are impacted. No patch or official remediation guidance is currently available.

Successful exploitation can lead to denial of service by making the printer unresponsive or potentially allow an attacker to execute arbitrary code remotely without authentication. This could compromise the affected device and potentially the network it is connected to. The vulnerability affects multiple Canon printer models across different regions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit network exposure of affected printers by isolating them on segmented networks or restricting access to trusted users only. Monitor vendor communications for updates on patches or official mitigations.