Skip to content
OpenAdvisories
High · 7.8 CVE-2022-43701 EUVD-2022-46683GHSA-f7p2-4f5g-hfv9

Insecure directory permissions on installer files

Published Jul 27, 2023 · Updated Feb 13, 2025 · Assigned by Arm

Description

When the installation directory does not have sufficiently restrictive file permissions, an attacker can modify files in the installation directory to cause execution of malicious code.

Affected products

VendorProductAffectedFixed
Arm Arm Compiler 5 (AC5), Arm Compiler for Embedded 6 (AC6), Fast Models (FM), Arm Compiler for Embedded FuSA (ACEF), Arm Development Studio (ADS), Arm Forge (AF), Arm Mobile Studio (AMS), DS-5 AC5 All Releases, AC6 Releases prior to 6.20, ACEF All Releases, ADS All Releases, AF Releases prior to 22.1, AMS All releases, DS5 All Releases, FM All Releases, GT All Releases, KMDK All Releases, MS All Releases —

References