CVE-2025-14625

CWE-4273 documents3 sources

Severity

5.4MEDIUM

EPSS

0.0%

top 99.63%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel Quartus Prime Altera Quartus Prime Lite Altera Quartus Prime Standard

Timeline

PublishedJan 7

Description

Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Standard on Windows (Nios II Command Shell modules), Altera Quartus Prime Lite on Windows (Nios II Command Shell modules) allows Search Order Hijacking.This issue affects Quartus Prime Standard: from 19.1 through 24.1; Quartus Prime Lite: from 19.1 through 24.1.

CVSS vector

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages3 packages

▶CVEListV5altera/quartus_prime_lite19.1 — 24.1

▶CVEListV5altera/quartus_prime_standard19.1 — 24.1

▶NVDintel/quartus_prime19.1 — 25.1

🔴Vulnerability Details

GHSA

GHSA-fg3w-gvfh-562h: Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Standard on Windows (Nios II Command Shell modules), Altera Quartus Prime Lite↗2026-01-07

▶

CVEList

Quartus® Prime Standard and Quartus® Prime Lite Security Advisory↗2026-01-06

▶