CVE-2022-43702: Arm Compiler

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

When the directory containing the installer does not have sufficiently restrictive file permissions, an attacker can modify (or replace) the installer to execute malicious code.

Affected products

• Arm Arm Compiler: from 5.00, up to and including 5.06; from 6.00, before 6.18 (fixed in 6.18)
• Arm Arm Compiler For Embedded Fusa: version 6.16 only
• Arm Arm Compiler For Functional Safety: from 6.6, before 6.6.5 (fixed in 6.6.5)
• Arm Arm Development Studio: any version
• Arm Ds Development Studio: from 5.0.0, up to and including 5.29.3
• Arm Fast Models: any version

Published 2023-07-27. Last modified 2026-06-17.