Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-43703

An installer that loads or executes files using an unconstrained search path may be vulnerable to substitute files under control of an attacker being loaded or executed instead of the intended files.

Published

2023-07-27T22:15:12.870

Last Modified

2025-02-13T17:15:46.497

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses

Type: Secondary
CWE-427
Type: Primary
CWE-427

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	arm	arm_development_studio	*	Yes
Application	arm	ds_development_studio	≤ 5.29.3	Yes

References

https://developer.arm.com/documentation/ka005596/latest Vendor Advisory ([email protected])
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00930.html ([email protected])
https://developer.arm.com/documentation/ka005596/latest Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00930.html (af854a3a-2127-422b-91ae-364da2661108)