Arm Development Studio CVEs and Security Vulnerabilities

CVE-2025-7427

Uncontrolled Search Path Element in Arm Development Studio before 2025

Uncontrolled Search Path Element in Arm Development Studio before 2025 may allow an attacker to perform a DLL hijacking attack. Successful exploitation could lead to local arbitrary code execution in the context of the user running Arm Development Studio.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Arm

Products

Arm Development Studio

CVE-2022-43703

Incomplete verification of installation file signature

An installer that loads or executes files using an unconstrained search path may be vulnerable to substitute files under control of an attacker being loaded or executed instead of the intended files.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Arm

Products

Arm Development Studio Ds Development Studio

CVE-2022-43702

Incomplete verification of installation file signature

When the directory containing the installer does not have sufficiently restrictive file permissions, an attacker can modify (or replace) the installer to execute malicious code.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Arm

Products

Arm Compiler Arm Compiler For Embedded Fusa Arm Compiler For Functional Safety and 3 more

CVE-2022-43701

Insecure directory permissions on installer files

When the installation directory does not have sufficiently restrictive file permissions, an attacker can modify files in the installation directory to cause execution of malicious code.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Arm

Products

Arm Compiler Arm Compiler For Embedded Fusa Arm Compiler For Functional Safety and 8 more

Search vulnerabilities

Uncontrolled Search Path Element in Arm Development Studio before 2025

Incomplete verification of installation file signature

Incomplete verification of installation file signature

Insecure directory permissions on installer files