7.8High
CVE-2022-43703
Description
An installer that loads or executes files using an unconstrained search path may be vulnerable to substitute files under control of an attacker being loaded or executed instead of the intended files.
Weakness (CWE):
CWE-427
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| arm | arm development studio | — | |
| arm | ds development studio | 5.0.0 – ≤ 5.29.3 |
References and patches
CPE matches (NVD) (2)
cpe:2.3:a:arm:arm_development_studio:*:*:*:*:*:*:*:*cpe:2.3:a:arm:ds_development_studio:*:*:*:*:*:*:*:*≥ 5.0.0 ≤ 5.29.3