← Database

CVE-2022-40080

HIGH CVSS: 7.8 Published: 2023-02-16 Modified: 2026-06-17

Description

Stack overflow vulnerability in Aspire E5-475G 's BIOS firmware, in the FpGui module, a second call to GetVariable services allows local attackers to execute arbitrary code in the UEFI DXE phase and gain escalated privileges.

Affected Platforms

Acer Aspire E5-475GAcer Aspire E5-475G Firmware

Weakness Type

CWE-787, CWE-787

References