PT-2026-1520 · Intel · Quartus Prime Lite+1

Published 2026-01-06 · Updated 2026-01-28 · CVE-2025-14625

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Altera Quartus Prime Standard versions 19.1 through 24.1 Altera Quartus Prime Lite versions 19.1 through 24.1

Description An uncontrolled search path element issue exists in Altera Quartus Prime Standard and Lite on Windows, specifically within the Nios II Command Shell modules. This allows for Search Order Hijacking.

Recommendations Update Altera Quartus Prime Standard to a version later than 24.1. Update Altera Quartus Prime Lite to a version later than 24.1.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2025-14625

Affected Products

Quartus Prime Lite

Quartus Prime Standard

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-14625 · Security Note
• https://altera.com/security/security-advisory/asa-0005 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-14625 · Vendor Advisory
• https://community.altera.com/kb/knowledge-base/how-to-mitigate-the-security-vulnerability-in-the-nios%C2%AE-ii-command-shell-utility/350185 · Note
• https://twitter.com/CVEnew/status/2008664312588414988 · Twitter Post
• https://t.me/cveNotify/150214 · Telegram Post