CVE-2022-43703
HIGHInstaller - Path Traversal
Title source: llmDescription
An installer that loads or executes files using an unconstrained search path may be vulnerable to substitute files under control of an attacker being loaded or executed instead of the intended files.
Scores
CVSS v3
7.8
EPSS
0.0007
EPSS Percentile
20.3%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-427
Status
published
Affected Products (2)
arm/arm_development_studio
arm/ds_development_studio
< 5.29.3
Timeline
Published
Jul 27, 2023
Tracked Since
Feb 18, 2026