Privilege escalation via writable installation files

Incorrect default permissions in Arm development-tool installers allow local users to execute malicious code through writable installation files. The installers create or retain installation directories whose permissions let a lower-privileged account replace files that trusted users or processes later execute. Exploitation requires local low-privileged access and a permissive installation directory; successful replacement runs attacker-controlled code in the later execution context.