Arm Compiler For Functional Safety vulnerabilities

CVE-2024-7883 [LOW] CWE-226 CVE-2024-7883: When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secu When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state. This allows an attacker to read a limited quantity of S

CVE-2022-43702 [HIGH] CWE-284 CVE-2022-43702: When the directory containing the installer does not have sufficiently restrictive file permissions, When the directory containing the installer does not have sufficiently restrictive file permissions, an attacker can modify (or replace) the installer to execute malicious code.

CVE-2022-43701 [HIGH] CWE-276 CVE-2022-43701: When the installation directory does not have sufficiently restrictive file permissions, an attacker When the installation directory does not have sufficiently restrictive file permissions, an attacker can modify files in the installation directory to cause execution of malicious code.