CVE-2022-43703: Incomplete verification of installation file signature
Published Jul 27, 2023
·Updated
An installer that loads or executes files using an unconstrained search path may be vulnerable to substitute files under control of an attacker being loaded or executed instead of the intended files.
Affected Software
2 affected components
Arm Arm Development Studio
Arm Ds Development Studio>=5.0.0<=5.29.3
Event History
Jul 27, 2023
CVE Published
via MITRE·09:52 PM
Data Sourced
via MITRE·09:52 PM
DescriptionWeakness
Data Sourced
10:15 PM
Description
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2022-43703.
2
What is the severity of CVE-2022-43703?
The severity of CVE-2022-43703 is high.
3
Which software is affected by CVE-2022-43703?
Arm Arm Development Studio and Arm Ds Development Studio versions 5.0.0 to 5.29.3 are affected.
4
What is the possible impact of CVE-2022-43703?
An attacker may be able to substitute files and execute them instead of the intended files.
5
How can I get more information about CVE-2022-43703?
You can refer to the documentation provided by Arm at the following link: https://developer.arm.com/documentation/ka005596/latest