CVE:CVE-2022-43701
CNNVD:CNNVD-202307-2176
ARM Compiler是英国ARM公司的一个用于编译生成ARM架构应用的工具。
ARM Compiler 存在安全漏洞，该漏洞源于当安装目录没有足够限制文件权限时，攻击者可以修改安装目录中的文件导致执行恶意代码。
solution:Upgrade arm arm_compiler to a higher version than 5.06,6.20,and avoid the version [5.00,5.06],[6.00,6.20); Upgrade arm arm_compiler_for_embedded_fusa to a higher version than 6.16,and avoid the version 6.16; Upgrade arm arm_compiler_for_functional_safety to a higher version than 6.6,and avoid the version 6.6; Upgrade arm arm_development_studio to a higher version than *; Upgrade arm arm_mobile_studio to a higher version than *; Upgrade arm ds_development_studio to a higher version than 5.29.3,and avoid the version [5.0.0,5.29.3]; Upgrade arm fast_models to a higher version than *; Upgrade arm gnu_toolchain to a higher version than *; Upgrade arm keil_mdk to a higher version than *; Upgrade arm linaro_forge to a higher version than 22.1,and avoid the version (,22.1); Upgrade arm mbed_studio to a higher version than *