CVE-2025-14596: Quartus Prime Pro Edition Installer Advisory
Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Pro
Installer (SFX)
on Windows allows Search Order Hijacking.This issue affects Quartus Prime Pro: from 24.1 through 24.3.1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14596?
CVE-2025-14596 has been rated with a medium severity level due to its potential for allowing search order hijacking.
How do I fix CVE-2025-14596?
To mitigate CVE-2025-14596, ensure that your Altera Quartus Prime Pro software is updated to a version later than 24.3.1.
What systems are affected by CVE-2025-14596?
CVE-2025-14596 affects all installations of Altera Quartus Prime Pro from versions 23.3 through 24.3.1 on Windows.
What is an uncontrolled search path element vulnerability?
An uncontrolled search path element vulnerability, such as CVE-2025-14596, allows attackers to manipulate the search path for executables, potentially leading to the execution of malicious code.
Is there a workaround for CVE-2025-14596?
Currently, the recommended workaround for CVE-2025-14596 is to avoid running the installer from untrusted locations and to regularly monitor for updates.