CVE-2022-43703

HIGH
MEDIUM Priority: 0.02 BB Relevance: 41/100
Published: 2023-07-27 Modified: 2026-11-10 First seen: 2026-11-10 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

An installer that loads or executes files using an unconstrained search path may be vulnerable to substitute files under control of an attacker being loaded or executed instead of the intended files.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
arm arm_development_studio *
arm ds_development_studio 5.0.0 – 5.29.3

Bug Bounty Relevance

41 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

7.8 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.19%
Raw Score 0.001940
Percentile 9.2%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00194
2026-11-12
0.00194
2026-11-10
0.00194
2026-11-09
0.00194

Intelligence Sources

nvd ref →