PT-2026-1517 · Intel · Altera Quartus Prime Pro

Published 2026-01-06 · Updated 2026-01-07 · CVE-2025-14605

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Altera Quartus Prime Pro versions 17.0 through 25.1.1

Description An uncontrolled search path element issue exists in Altera Quartus Prime Pro on Windows, specifically within the System Console modules. This allows for a Search Order Hijacking attack.

Recommendations Update to a version later than 25.1.1.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2025-14605

Affected Products

Altera Quartus Prime Pro

References · 7

• https://altera.com/security/security-advisory/asa-0004 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-14605 · Security Note
• https://osv.dev/vulnerability/CVE-2025-14605 · Vendor Advisory
• https://t.me/cveNotify/147917 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2008755628848623897 · Twitter Post
• https://t.me/CVEtracker/41556 · Telegram Post
• https://twitter.com/CVEnew/status/2008654028524138731 · Twitter Post