CVE-2022-43701: Arm Compiler

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

When the installation directory does not have sufficiently restrictive file permissions, an attacker can modify files in the installation directory to cause execution of malicious code.

Affected products

• Arm Arm Compiler: from 5.00, up to and including 5.06; from 6.00, before 6.20 (fixed in 6.20)
• Arm Arm Compiler For Embedded Fusa: version 6.16 only
• Arm Arm Compiler For Functional Safety: version 6.6 only
• Arm Arm Development Studio: any version
• Arm Arm Mobile Studio: any version
• Arm Ds Development Studio: from 5.0.0, up to and including 5.29.3
• Arm Fast Models: any version
• Arm GNU Toolchain: any version
• Arm Keil Mdk: any version
• Arm Linaro Forge: before 22.1 (fixed in 22.1)
• Arm Mbed Studio: any version

Published 2023-07-27. Last modified 2026-06-17.