CVE-2025-14599mediumCWE-427

CVE-2025-14599: medium-severity vulnerability in Altera Quartus Prime Standard

Quartus® Prime Standard and Quartus® Prime Lite Security Advisory

Published

Follow this CVE+ Monitor Quartus Prime Standard+ Monitor Quartus Prime Lite

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.4epss 0.1%
Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Standard Installer (SFX) on Windows, Altera Quartus Prime Lite  Installer (SFX) on Windows allows Search Order Hijacking.This issue affects Quartus Prime Standard: from 23.1 through 24.1; Quartus Prime Lite: from 23.1 through 24.1.
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Altera · Quartus Prime LiteAltera · Quartus Prime Standard
Related CVEs — Altera Quartus Prime Standard

In the same product, most dangerous first.

CVE-2025-14625MEDIUMQuartus® Prime Standard and Quartus® Prime Lite Security AdvisoryEPSS 0.1%CVE-2025-14614MEDIUMQuartus® Prime Standard and Quartus® Prime Lite Security AdvisoryEPSS 0.1%CVE-2025-13665MEDIUMQuartus Prime Standard Security AdvisoryEPSS 0.1%CVE-2025-13664MEDIUMQuartus Prime Standard Security AdvisoryEPSS 0.1%