CVE-2017-7496: Fedoraproject Arm Installer

High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days.

fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due to lack of checking the error condition of mount operation failure on unsafely created temporary directories.

Affected products

• Fedoraproject Arm Installer: up to and including 1.99.16

Published 2017-06-26. Last modified 2026-06-17.