QP
Product
Quartus Prime
43
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 28Medium 15Low 0
Watch
Add Quartus Prime to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-8737 | 6.8 | Nov 12 | Improper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro software before version 20.1 may allow an unauthenticated… Affected: before 20.1 |
| CVE-2025-14625 | 6.7 | Jan 6 | Quartus® Prime Standard and Quartus® Prime Lite Security Advisory Affected: 19.1 before 25.1; 19.1 before 25.1 |
| CVE-2025-14614 | 6.7 | Jan 6 | Quartus® Prime Standard and Quartus® Prime Lite Security Advisory Affected: 23.1 before 25.1; 23.1 before 25.1 |
| CVE-2025-14599 | 6.7 | Jan 6 | Quartus® Prime Standard and Quartus® Prime Lite Security Advisory Affected: 23.1 before 25.1; 23.1 before 25.1 |
| CVE-2025-14612 | 6.7 | Jan 6 | Quartus Prime Pro Edition Advisory Affected: 24.1 before 25.3 |
| CVE-2025-14605 | 6.7 | Jan 6 | Quartus Prime Pro Edition Advisory Affected: 17.0 before 25.1.1 |
| CVE-2025-14596 | 6.7 | Jan 6 | Quartus Prime Pro Edition Installer Advisory Affected: 24.1 before 25.1 |
| CVE-2025-13665 | 6.7 | Dec 12 | The System Console Utility for Windows is vulnerable to a DLL planting vulnerability Affected: before 24.1 |
| CVE-2025-13668 | 6.7 | Dec 11 | A potential security vulnerability in Quartus® Prime Pro Edition Design Software may allow escalation of privilege Affected: before 25.1 |
| CVE-2025-13664 | 6.7 | Dec 11 | A potential security vulnerability in Quartus® Prime Standard Edition Design Software may allow escalation of privilege Affected: before 24.1 |
| CVE-2025-13663 | 6.7 | Dec 11 | Under certain circumstances, the Quartus Prime Pro Installer for Windows does not check the permissions of the Quartus target installation directory if the target installation… Affected: before 25.1 |
| CVE-2023-24478 | 5.5 | Aug 15 | Use of insufficiently random values for some Intel Agilex(R) software included as part of Intel(R) Quartus(R) Prime Pro Edition for linux before version 22.4 may allow an… Affected: before 22.4 |
| CVE-2020-8767 | 5.5 | Nov 12 | Uncaught exception in the Intel(R) 50GbE IP Core for Intel(R) Quartus Prime before version 20.2 may allow an authenticated user to potentially enable denial of service via local… Affected: before 20.2 |
| CVE-2019-14604 | 5.5 | Dec 16 | Null pointer dereference in the FPGA kernel driver for Intel(R) Quartus(R) Prime Pro Edition before version 19.3 may allow an authenticated user to potentially enable denial of… Affected: before 19.3 |
| CVE-2022-26888 | 4.1 | Feb 16 | Cross-site scripting in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable information disclosure via local access Affected: before 22.1; before 22.2 |
Showing 15