PT-2026-1520 · Intel · Quartus Prime Lite+1

CVE-2025-14625 · Publicado 2026-01-06 · Atualizado 2026-01-28

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Média

Vetor base

AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Altera Quartus Prime Standard versions 19.1 through 24.1 Altera Quartus Prime Lite versions 19.1 through 24.1

Description An uncontrolled search path element issue exists in Altera Quartus Prime Standard and Lite on Windows, specifically within the Nios II Command Shell modules. This allows for Search Order Hijacking.

Recommendations Update Altera Quartus Prime Standard to a version later than 24.1. Update Altera Quartus Prime Lite to a version later than 24.1.

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2025-14625

Produtos afetados

Quartus Prime Lite

Quartus Prime Standard

Referências · 6

• https://community.altera.com/kb/knowledge-base/how-to-mitigate-the-security-vulnerability-in-the-nios%C2%AE-ii-command-shell-utility/350185 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-14625 · Nota de Segurança
• https://altera.com/security/security-advisory/asa-0005 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2008664312588414988 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-14625 · Aviso do Fabricante
• https://t.me/cveNotify/150214 · Publicação no Telegram