PT-2026-1516 · Altera · Quartus Prime Lite+1

Published 2026-01-06 · Updated 2026-01-07 · CVE-2025-14599

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Altera Quartus Prime Standard versions 23.1 through 24.1 Altera Quartus Prime Lite versions 23.1 through 24.1

Description An uncontrolled search path element issue exists in the Altera Quartus Prime Standard Installer (SFX) and Altera Quartus Prime Lite Installer (SFX) on Windows. This allows for Search Order Hijacking.

Recommendations Update Altera Quartus Prime Standard to a version later than 24.1. Update Altera Quartus Prime Lite to a version later than 24.1.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2025-14599

Affected Products

Quartus Prime Lite

Quartus Prime Standard

References · 6

• https://osv.dev/vulnerability/CVE-2025-14599 · Vendor Advisory
• https://altera.com/security/security-advisory/asa-0005 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-14599 · Security Note
• https://t.me/cveNotify/147916 · Telegram Post
• https://twitter.com/CVEnew/status/2008658212254261472 · Twitter Post
• https://t.me/CVEtracker/41555 · Telegram Post