high
7.8
CWE
787 119
Advisory Published
Updated

CVE-2022-30426: Buffer Overflow

First published: Thu Sep 22 2022(Updated: )

There is a stack buffer overflow vulnerability, which could lead to arbitrary code execution in UEFI DXE driver on some Acer products. An attack could exploit this vulnerability to escalate privilege from ring 3 to ring 0, and hijack control flow during UEFI DXE execution. This affects Altos T110 F3 firmware version <= P13 (latest) and AP130 F2 firmware version <= P04 (latest) and Aspire 1600X firmware version <= P11.A3L (latest) and Aspire 1602M firmware version <= P11.A3L (latest) and Aspire 7600U firmware version <= P11.A4 (latest) and Aspire MC605 firmware version <= P11.A4L (latest) and Aspire TC-105 firmware version <= P12.B0L (latest) and Aspire TC-120 firmware version <= P11-A4 (latest) and Aspire U5-620 firmware version <= P11.A1 (latest) and Aspire X1935 firmware version <= P11.A3L (latest) and Aspire X3475 firmware version <= P11.A3L (latest) and Aspire X3995 firmware version <= P11.A3L (latest) and Aspire XC100 firmware version <= P11.B3 (latest) and Aspire XC600 firmware version <= P11.A4 (latest) and Aspire Z3-615 firmware version <= P11.A2L (latest) and Veriton E430G firmware version <= P21.A1 (latest) and Veriton B630_49 firmware version <= AAP02SR (latest) and Veriton E430 firmware version <= P11.A4 (latest) and Veriton M2110G firmware version <= P21.A3 (latest) and Veriton M2120G fir.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Acer Altos T110 F3 Firmware<p13
Acer Altos T110 F3
Acer Ap130 F2 Firmware<p04
Acer Ap130 F2
Acer Aspire 1600x Firmware<p11.a3l
Acer Aspire 1600x
Acer Aspire 1602m Firmware<p11.a3l
Acer Aspire 1602m
Acer Aspire 7600u Firmware<p11.a4
Acer Aspire 7600u
Acer Aspire Mc605 Firmware<p11.a4l
Acer Aspire Mc605
Acer Aspire Tc-105 Firmware<p12.b0l
Acer Aspire Tc-105
Acer Aspire Tc-120 Firmware<p11-a4
Acer Aspire Tc-120
Acer Aspire U5-620 Firmware<p11.a1
Acer Aspire U5-620
Acer Aspire X1935 Firmware<p11.a3l
Acer Aspire X1935
Acer Aspire X3475 Firmware<p11.a3l
Acer Aspire X3475
Acer Aspire X3995 Firmware<p11.a3l
Acer Aspire X3995
Acer Aspire Xc100 Firmware<p11.b3
Acer Aspire Xc100
Acer Aspire Xc600 Firmware<p11.a4
Acer Aspire Xc600
Acer Aspire Z3-615 Firmware<p11.a2l
Acer Aspire Z3-615
Acer Veriton B630 49 Firmware<aap02sr
Acer Veriton B630 49
Acer Veriton E430g Firmware<p21.a1
Acer Veriton E430g
Acer Veriton E430 Firmware<p11.a4
Acer Veriton E430
Acer Veriton M2110g Firmware<p21.a3
Acer Veriton M2110g
Acer Veriton M2120g Firmware<p11-a3
Acer Veriton M2120g
Acer Veriton M2611g Firmware<p11-b0l
Acer Veriton M2611g
Acer Veriton M2611 Firmware<p11.b0
Acer Veriton M2611
Acer Veriton M4620 Firmware<p21.a3
Acer Veriton M4620
Acer Veriton M4620g Firmware<p21.a3
Acer Veriton M4620g
Acer Veriton M6620g Firmware<p21.a0
Acer Veriton M6620g
Acer Veriton N2620g Firmware<p21.b0
Acer Veriton N2620g
Acer Veriton N4620g Firmware<p11.a2l
Acer Veriton N4620g
Acer Veriton N4630g Firmware<p21.b0
Acer Veriton N4630g
Acer Veriton S6620g Firmware<p11.a1
Acer Veriton S6620g
Acer Veriton X2611g Firmware<p11.a4
Acer Veriton X2611g
Acer Veriton X2611 Firmware<p11.a4
Acer Veriton X2611
Acer Veriton X4620g Firmware<p11.a3
Acer Veriton X4620g
Acer Veriton X6620g Firmware<p11.a3
Acer Veriton X6620g
Acer Veriton Z2650g Firmware<p21.a1
Acer Veriton Z2650g

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203