PT-2026-1517 · Intel · Altera Quartus Prime Pro

CVE-2025-14605 · Publicado 2026-01-06 · Atualizado 2026-01-07

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Média

Vetor base

AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Altera Quartus Prime Pro versions 17.0 through 25.1.1

Description An uncontrolled search path element issue exists in Altera Quartus Prime Pro on Windows, specifically within the System Console modules. This allows for a Search Order Hijacking attack.

Recommendations Update to a version later than 25.1.1.

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2025-14605

Produtos afetados

Altera Quartus Prime Pro

Referências · 7

• https://altera.com/security/security-advisory/asa-0004 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-14605 · Nota de Segurança
• https://t.me/cveNotify/147917 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-14605 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/2008755628848623897 · Publicação no Twitter
• https://t.me/CVEtracker/41556 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2008654028524138731 · Publicação no Twitter