Incomplete verification of installation file signature

7.8 CVSS

Vulnerability Description

An installer that loads or executes files using an unconstrained search path may be vulnerable to substitute files under control of an attacker being loaded or executed instead of the intended files.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-43703

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

FalconCorruption
Intel

References

More from Arm Ltd

View All →

CVE-2025-8045

Mali GPU Kernel Driver allows improper GPU processing operations

Unknown 0

CVE-2025-6349

Mali GPU Kernel Driver allows improper GPU memory processing operations

Unknown 0

CVE-2025-3212

Mali GPU Kernel Driver allows access to already freed memory

Unknown 0

CVE-2025-2879

Mali GPU Kernel Driver allows improper GPU processing operations

Unknown 0

CVE-2025-1246

Mali GPU Userspace Driver allows an Out-of-Bounds access

Unknown 0

Affected Vendor

Arm Ltd

View all reports →

Affected Software

Arm Compiler 5 (AC5), Arm Compiler for Embedded 6 (AC6), Fast Models (FM), Arm Compiler for Embedded FuSA (ACEF), Arm Development Studio (ADS), Arm Forge (AF), Arm Mobile Studio (AMS), DS-5 Development Studio, Fast Models (FM), GNU Toolchain (GT), Keil MDK (KMDK), Mbed Studio (MS)

Vulnerable Versions:

AC5 All Releases, AC6 Releases prior to 6.20, ACEF All Releases, ADS All Releases, AF Releases prior to 22.1, AMS All releases, DS5 All Releases, FM All Releases, GT All Releases, KMDK All Releases, MS All Releases