CVE-2025-13668CWE-427

CVE-2025-13668

Medium · published December 12, 2025

CVSS v3.1
6.7
EPSS
0%
Percentile
1.2
In the wild
Unconfirmed
What it is

A potential security vulnerability in Quartus® Prime Pro Edition Design Software may allow escalation of privilege.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00110 · 1.2th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2025-12-12T03:15Z
Affected products (1)
ProductVersionsFixed in
intel/quartus_prime< 25.125.1
References (1)
https://www.altera.com/security/security-advisory/asa-0001 · 04c0172e-9735-4a9d-a92a-fe01fa863447
EPSS history
Timeline
  • 11 DEC 22:02Z
    Quartus Prime Pro Edition Advisory
    cvelistv5