Approved changes feed: RSS · Atom

cpe:2.3:a:arm_ltd:arm_compiler_5_(ac5),_arm_compiler_for_embedded_6_(ac6),_fast_models_(fm),_arm_compiler_for_embedded_fusa_(acef),_arm_development_studio_(ads),_arm_forge_(af),_arm_mobile_studio_(ams),_ds-5_development_studio,_fast_models_(fm),_gnu_toolchain_(gt),_keil_mdk_(kmdk),_mbed_studio_(ms):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorArm Ltd (1e91e0fc-e9b8-5c76-a9af-f78f0a93dc5e)
ProductArm Compiler 5 (Ac5), Arm Compiler For Embedded 6 (Ac6), Fast Models (Fm), Arm Compiler For Embedded Fusa (Acef), Arm Development Studio (Ads), Arm Forge (Af), Arm Mobile Studio (Ams), Ds 5 Development Studio, Fast Models (Fm), Gnu Toolchain (Gt), Keil Mdk (Kmdk), Mbed Studio (Ms) (61451ea7-e95c-5b0a-ad62-5ec6fa4590d4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-43703 vulnerable 2026-06-03 14:48:15.719795 Incomplete verification of installation file signature
An installer that loads or executes files using an unconstrained search path may be vulnerable to substitute files under control of an attacker being loaded or executed instead of the intended files.
Published: 2023-07-27T21:52:29.229Z
Updated: 2025-02-13T16:33:38.228Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43702 vulnerable 2026-06-03 14:48:15.717730 Incomplete verification of installation file signature
When the directory containing the installer does not have sufficiently restrictive file permissions, an attacker can modify (or replace) the installer to execute malicious code.
Published: 2023-07-27T21:47:25.882Z
Updated: 2025-02-13T16:33:37.678Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43701 vulnerable 2026-06-03 14:48:15.707851 Insecure directory permissions on installer files
When the installation directory does not have sufficiently restrictive file permissions, an attacker can modify files in the installation directory to cause execution of malicious code.
Published: 2023-07-27T21:28:08.461Z
Updated: 2025-02-13T16:33:37.089Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.