CVE-2022-30426

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2022-09-23 · updated 2026-07-09
Weakness: CWE-787

Description

There is a stack buffer overflow vulnerability, which could lead to arbitrary code execution in UEFI DXE driver on some Acer products. An attack could exploit this vulnerability to escalate privilege from ring 3 to ring 0, and hijack control flow during UEFI DXE execution. This affects Altos T110 F3 firmware version <= P13 (latest) and AP130 F2 firmware version <= P04 (latest) and Aspire 1600X firmware version <= P11.A3L (latest) and Aspire 1602M firmware version <= P11.A3L (latest) and Aspire 7600U firmware version <= P11.A4 (latest) and Aspire MC605 firmware version <= P11.A4L (latest) and Aspire TC-105 firmware version <= P12.B0L (latest) and Aspire TC-120 firmware version <= P11-A4 (latest) and Aspire U5-620 firmware version <= P11.A1 (latest) and Aspire X1935 firmware version <= P11.A3L (latest) and Aspire X3475 firmware version <= P11.A3L (latest) and Aspire X3995 firmware version <= P11.A3L (latest) and Aspire XC100 firmware version <= P11.B3 (latest) and Aspire XC600 firmware version <= P11.A4 (latest) and Aspire Z3-615 firmware version <= P11.A2L (latest) and Veriton E430G firmware version <= P21.A1 (latest) and Veriton B630_49 firmware version <= AAP02SR (latest) and Veriton E430 firmware version <= P11.A4 (latest) and Veriton M2110G firmware version <= P21.A3 (latest) and Veriton M2120G fir.

Affected products

Acer Altos T110 F3 Firmware: before p13 — fixed in p13
Acer Ap130 F2 Firmware: before p04 — fixed in p04
Acer Aspire 1600X Firmware: before p11.a3l — fixed in p11.a3l
Acer Aspire 1602M Firmware: before p11.a3l — fixed in p11.a3l
Acer Aspire 7600U Firmware: before p11.a4 — fixed in p11.a4
Acer Aspire Mc605 Firmware: before p11.a4l — fixed in p11.a4l
Acer Aspire Tc-105 Firmware: before p12.b0l — fixed in p12.b0l
Acer Aspire Tc-120 Firmware: before p11-a4 — fixed in p11-a4
Acer Aspire U5-620 Firmware: before p11.a1 — fixed in p11.a1
Acer Aspire X1935 Firmware: before p11.a3l — fixed in p11.a3l
Acer Aspire X3475 Firmware: before p11.a3l — fixed in p11.a3l
Acer Aspire X3995 Firmware: before p11.a3l — fixed in p11.a3l
Acer Aspire Xc100 Firmware: before p11.b3 — fixed in p11.b3
Acer Aspire Xc600 Firmware: before p11.a4 — fixed in p11.a4
Acer Aspire Z3-615 Firmware: before p11.a2l — fixed in p11.a2l
Acer Veriton B630 49 Firmware: before aap02sr — fixed in aap02sr
Acer Veriton E430 Firmware: before p11.a4 — fixed in p11.a4
Acer Veriton E430G Firmware: before p21.a1 — fixed in p21.a1
Acer Veriton M2110G Firmware: before p21.a3 — fixed in p21.a3
Acer Veriton M2120G Firmware: before p11-a3 — fixed in p11-a3
Acer Veriton M2611 Firmware: before p11.b0 — fixed in p11.b0
Acer Veriton M2611G Firmware: before p11-b0l — fixed in p11-b0l
Acer Veriton M4620 Firmware: before p21.a3 — fixed in p21.a3
Acer Veriton M4620G Firmware: before p21.a3 — fixed in p21.a3
Acer Veriton M6620G Firmware: before p21.a0 — fixed in p21.a0
Acer Veriton N2620G Firmware: before p21.b0 — fixed in p21.b0
Acer Veriton N4620G Firmware: before p11.a2l — fixed in p11.a2l
Acer Veriton N4630G Firmware: before p21.b0 — fixed in p21.b0
Acer Veriton S6620G Firmware: before p11.a1 — fixed in p11.a1
Acer Veriton X2611 Firmware: before p11.a4 — fixed in p11.a4

How to fix

Upgrade to a fixed version: Acer Altos T110 F3 Firmware p13; Acer Ap130 F2 Firmware p04; Acer Aspire 1600X Firmware p11.a3l; Acer Aspire 1602M Firmware p11.a3l; Acer Aspire 7600U Firmware p11.a4; Acer Aspire Mc605 Firmware p11.a4l; Acer Aspire Tc-105 Firmware p12.b0l; Acer Aspire Tc-120 Firmware p11-a4; Acer Aspire U5-620 Firmware p11.a1; Acer Aspire X1935 Firmware p11.a3l; Acer Aspire X3475 Firmware p11.a3l; Acer Aspire X3995 Firmware p11.a3l. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-30426 or the next vulnerability affects your stack