TI-2022-13613 Aliases CVE-2022-31694 GHSA-frhw-rp32-3863

Uncontrolled search path in VMware InstallBuilder

LOW 33CWE-427Published 2022-11-18 · Updated 2025-04-29

Key facts

Attack vector: Local
Privileges required: Low
User interaction: Required
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-427.

Summary

InstallBuilder Qt installers built with versions previous to 22.10 try to load DLLs from the installer binary parent directory when displaying popups. This may allow an attacker to plant a malicious DLL in the installer parent directory to allow executing code with the privileges of the installer (when the popup triggers the loading of the library). Exploiting these type of vulnerabilities generally require that an attacker has access to a vulnerable machine to plant the malicious DLL.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00226 13th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	VMware InstallBuilder	All InstallBuilder for Qt versions prior to version 22.10.0	—	No fix listed	CNA

VMware InstallBuilder Vendor— Affected All InstallBuilder for Qt versions prior to version 22.10.0 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:installbuilder:installbuilder::::::qt::*	before 22.10.0	Vulnerable	Installbuilder

cpe:2.3:a:installbuilder:installbuilder:*:*:*:*:*:qt:*:* Versions before 22.10.0 Vulnerable ·Installbuilder

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2022-31694
2026-10-03 Alias added: GHSA-frhw-rp32-3863

References

Advisory 1

https://blog.installbuilder.com/2022/11/installbuilder-22100-released.html

TI-2020-03476 Uncontrolled search path in VMware InstallBuilder CVSS 3.1HIGH 7.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences