Description
Uncontrolled Search Path Element in Arm Development Studio before 2025 may allow an attacker to perform a DLL hijacking attack. Successful exploitation could lead to local arbitrary code execution in the context of the user running Arm Development Studio.
Published: 2025-07-22
Score: 5.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-22307 Uncontrolled Search Path Element in Arm Development Studio before 2025 may allow an attacker to perform a DLL hijacking attack. Successful exploitation could lead to local arbitrary code execution in the context of the user running Arm Development Studio.
History

Thu, 26 Feb 2026 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

 ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 18 Dec 2025 17:30:00 +0000

Type Values Removed Values Added
First Time appeared Arm
Arm arm Development Studio
CPEs cpe:2.3:a:arm:arm_development_studio:*:*:*:*:*:*:*:*
Vendors & Products Arm
Arm arm Development Studio

Wed, 23 Jul 2025 19:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.9, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 22 Jul 2025 10:00:00 +0000

Type Values Removed Values Added
Description Uncontrolled Search Path Element in Arm Development Studio before 2025 may allow an attacker to perform a DLL hijacking attack. Successful exploitation could lead to local arbitrary code execution in the context of the user running Arm Development Studio.
Title Uncontrolled Search Path Element in Arm Development Studio before 2025
Weaknesses CWE-427
References

Subscriptions

Arm Arm Development Studio
cve-icon MITRE

Status: PUBLISHED

Assigner: Arm

Published:

Updated: 2026-02-26T17:50:25.474Z

Reserved: 2025-07-10T10:38:28.706Z

Link: CVE-2025-7427

cve-icon Vulnrichment

Updated: 2025-07-23T18:33:20.276Z

cve-icon NVD

Status : Analyzed

Published: 2025-07-22T10:15:25.923

Modified: 2025-12-18T17:19:19.833

Link: CVE-2025-7427

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses