CVE-2025-13663 | THREATINT

Description

Under certain circumstances, the Quartus Prime Pro Installer for Windows does not check the permissions of the Quartus target installation directory if the target installation directory already exists.

PUBLISHED Reserved 2025-11-25 | Published 2025-12-11 | Updated 2025-12-11 | Assigner Altera

MEDIUM: 6.7CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

MEDIUM: 5.4CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Problem types

CWE-279: Incorrect Execution-Assigned Permissions

Product status

Default status

unaffected

17.0 (custom)

affected

References

www.altera.com/security/security-advisory/asa-0001

cve.org (CVE-2025-13663)

nvd.nist.gov (CVE-2025-13663)

Download JSON