CVE-2025-13668 — Uncontrolled Search Path Element in Intel Quartus Prime

CWE-427 — Uncontrolled Search Path Element3 documents3 sources
Severity
5.4MEDIUMNVD
EPSS
0.0%
top 93.22%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Intel Quartus PrimeAltera Quartus Prime PRO
Timeline
PublishedDec 11
Latest updateDec 12

Description

A potential security vulnerability in Quartus® Prime Pro Edition Design Software may allow escalation of privilege.

CVSS vector

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5altera/quartus_prime_pro17.0 — 24.3.1

🔴Vulnerability Details

2
GHSA
GHSA-q7h6-p78c-jfw4: A potential security vulnerability in Quartus® Prime Pro Edition Design Software may allow escalation of privilege↗2025-12-12
▶
CVEList
Quartus Prime Pro Edition Advisory↗2025-12-11
▶
CVE-2025-13668 — Uncontrolled Search Path Element | cvebase