CVEvulnerability
CVE-2022-43703
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-07-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-427
Description
An installer that loads or executes files using an unconstrained search path may be vulnerable to substitute files under control of an attacker being loaded or executed instead of the intended files.
Affected configurations
• arm arm development studio
• arm ds development studio (>= 5.0.0 <= 5.29.3)
Related
Weakness · CWE (1)
- CWE-427 Uncontrolled Search Path Element weakness
References
- https://developer.arm.com/documentation/ka005596/latest Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00930.html www.intel.com
- https://developer.arm.com/documentation/ka005596/latest Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00930.html www.intel.com