CVE-2022-43703

Published: Jul 27, 2023Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

An installer that loads or executes files using an unconstrained search path may be vulnerable to substitute files under control of an attacker being loaded or executed instead of the intended files.

Affected (2)

Products: Arm: Arm Development Studio, Ds Development Studio

Arm

2 products

Arm Development Studio

Ds Development Studio

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Arm Arm Development Studio	All versions
Arm Ds Development Studio	From 5.0.0 to 5.29.3

Related CWEs

CWE-427

Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

References (4)

https://developer.arm.com/documentation/ka005596/latest

Source: arm-security@arm.com

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00930.html

Source: arm-security@arm.com

https://developer.arm.com/documentation/ka005596/latest

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00930.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.