CVE-2025-13663CWE-279

CVE-2025-13663

Medium · published December 12, 2025

CVSS v3.1
6.7
EPSS
0%
Percentile
0.7
In the wild
Unconfirmed
What it is

Under certain circumstances, the Quartus Prime Pro Installer for Windows does not check the permissions of the Quartus target installation directory if the target installation directory already exists.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00098 · 0.7th percentile
Weakness
CWE-279 · Incorrect Execution-Assigned Permissions
Published
2025-12-12T02:15Z
Affected products (1)
ProductVersionsFixed in
intel/quartus_prime< 25.125.1
References (1)
https://www.altera.com/security/security-advisory/asa-0001 · 04c0172e-9735-4a9d-a92a-fe01fa863447
EPSS history
Timeline
  • 11 DEC 20:35Z
    Quartus Prime Pro Edition Installer Advisory
    cvelistv5