CVE-2025-14599

EUVD-2025-206253
Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Standard 

Installer (SFX)

on Windows, Altera Quartus Prime Lite 

Installer (SFX)

 on Windows allows Search Order Hijacking.This issue affects Quartus Prime Standard: from 23.1 through 24.1; Quartus Prime Lite: from 23.1 through 24.1.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.7 MEDIUM
LOCAL
HIGH
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
AlteraCNA
6.7 MEDIUM
LOCAL
HIGH
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 2%
Affected Products (NVD)
VendorProductVersion
intelquartus_prime
23.1 ≤
𝑥
< 25.1
intelquartus_prime
23.1 ≤
𝑥
< 25.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.altera.com/security/security-advisory/asa-0005