3 matches found
CVE-2022-43701
CVE-2022-43701 relates to insecure/install-dir permissions in Arm DS for Intel SoC FPGA installation software, where insufficient default permissions can let a local attacker modify installation files to escalate privileges. The Intel advisory (INTEL-SA-00930) confirms the issue affects Arm DS fo...
CVE-2020-24658
Arm Compiler 5 through 5.06u6 contains a defect in the stack protection feature for detecting stack-based overflows. If the reference value written to the stack overlaps with the guard value, and both are overwritten, the protection may fail to detect corruption. This requires both a buffer overf...
CVE-2022-43702
Arm DS for Intel SoC FPGA software is affected by CVE-2022-43702 due to improper access control in the installer, potentially allowing a local-authenticated user to escalate privileges. The advisory notes all versions are affected and assigns a CVSS v3.1 base score of 8.8 (High). Remediation advi...