CVE-2022-43701

CVE-2022-43701: Insecure directory permissions on installer files

Vendor Arm Ltd
Product Arm Compiler 5 (AC5), Arm Compiler for Embedded 6 (AC6), Fast Models (FM), Arm Compiler for Embedded FuSA (ACEF), Arm Development Studio (ADS), Arm Forge (AF), Arm Mobile Studio (AMS), DS-5 Development Studio, Fast Models (FM), GNU Toolchain (GT), Keil MD
Weakness CWE-276
Published July 27, 2023
Last update February 13, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

When the installation directory does not have sufficiently restrictive file permissions, an attacker can modify files in the installation directory to cause execution of malicious code.

Key dates

02Disclosure timeline

July 27, 2023 CVE published
February 13, 2025 Record updated