{"cve":"CVE-2022-30426","nvd":{"published":"2022-09-23T00:15:09.747","modified":"2026-07-09T01:17:29.677","status":"Modified","description":"There is a stack buffer overflow vulnerability, which could lead to arbitrary code execution in UEFI DXE driver on some Acer products. An attack could exploit this vulnerability to escalate privilege from ring 3 to ring 0, and hijack control flow during UEFI DXE execution. This affects Altos T110 F3 firmware version <= P13 (latest) and AP130 F2 firmware version <= P04 (latest) and Aspire 1600X firmware version <= P11.A3L (latest) and Aspire 1602M firmware version <= P11.A3L (latest) and Aspire 7600U firmware version <= P11.A4 (latest) and Aspire MC605 firmware version <= P11.A4L (latest) and Aspire TC-105 firmware version <= P12.B0L (latest) and Aspire TC-120 firmware version <= P11-A4 (latest) and Aspire U5-620 firmware version <= P11.A1 (latest) and Aspire X1935 firmware version <= P11.A3L (latest) and Aspire X3475 firmware version <= P11.A3L (latest) and Aspire X3995 firmware version <= P11.A3L (latest) and Aspire XC100 firmware version <= P11.B3 (latest) and Aspire XC600 firmware version <= P11.A4 (latest) and Aspire Z3-615 firmware version <= P11.A2L (latest) and Veriton E430G firmware version <= P21.A1 (latest) and Veriton B630_49 firmware version <= AAP02SR (latest) and Veriton E430 firmware version <= P11.A4 (latest) and Veriton M2110G firmware version <= P21.A3 (latest) and Veriton M2120G fir.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8},"cwes":["CWE-787"],"references":["https://github.com/10TG/vulnerabilities/blob/main/Acer/CVE-2022-30426/CVE-2022-30426.md","https://github.com/10TG/vulnerabilities/blob/main/Acer/CVE-2022-30426/CVE-2022-30426.md"],"products":["acer:altos_t110_f3_firmware","acer:ap130_f2_firmware","acer:aspire_1600x_firmware","acer:aspire_1602m_firmware","acer:aspire_7600u_firmware","acer:aspire_mc605_firmware","acer:aspire_tc-105_firmware","acer:aspire_tc-120_firmware","acer:aspire_u5-620_firmware","acer:aspire_x1935_firmware","acer:aspire_x3475_firmware","acer:aspire_x3995_firmware","acer:aspire_xc100_firmware","acer:aspire_xc600_firmware","acer:aspire_z3-615_firmware","acer:veriton_b630_49_firmware","acer:veriton_e430_firmware","acer:veriton_e430g_firmware","acer:veriton_m2110g_firmware","acer:veriton_m2120g_firmware","acer:veriton_m2611_firmware","acer:veriton_m2611g_firmware","acer:veriton_m4620_firmware","acer:veriton_m4620g_firmware","acer:veriton_m6620g_firmware","acer:veriton_n2620g_firmware","acer:veriton_n4620g_firmware","acer:veriton_n4630g_firmware","acer:veriton_s6620g_firmware","acer:veriton_x2611_firmware","acer:veriton_x2611g_firmware","acer:veriton_x4620g_firmware","acer:veriton_x6620g_firmware","acer:veriton_z2650g_firmware"],"source":"nvd","synced_at":"2026-10-19T21:36:05.460296998+00:00"},"epss":{"cve":"CVE-2022-30426","score":0.0038,"percentile":0.31974,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}