The vulnerability exists in printer drivers supplied by Ricoh Company, Ltd. and Konica Minolta Japan, Inc. A specially crafted driver can be loaded by a user who has logged into the host. The flaw is a library path manipulation (CWE‑427) that bypasses the driver integrity checks, allowing the malicious driver code to run with system‑level privileges. This permits the attacker to execute arbitrary commands, alter system files, or install persistent backdoors.

Affected systems include any computers that have installed the printer driver packages from either Ricoh or Konica Minolta. The vendors do not specify particular revisions; therefore all known printer driver releases from these companies are considered at risk until an official patch is applied.

The CVSS score of 8.5 classifies this flaw as high severity, indicating that exploitation would significantly increase an attacker’s privileges. The EPSS score is not available, so exploitation probability cannot be quantified from public data, and the vulnerability is not yet listed in CISA’s KEV catalog. Inferred from the description, the exploitation requires a user who can log into the affected machine; the attacker then deploys a malicious driver file which the operating system loads with elevated rights. Because the attack starts from a local session, protection measures that limit user ability to install or modify drivers are highly effective.