CVE-2025-14612CWE-377

Quartus Prime Pro Edition Advisory

Medium · published January 6, 2026

CVSS v4.0
5.4
EPSS
0%
Percentile
1.2
In the wild
Unconfirmed
What it is

Insecure Temporary File vulnerability in Altera Quartus Prime Pro

Installer (SFX)

on Windows allows : Use of Predictable File Names.This issue affects Quartus Prime Pro: from 24.1 through 25.1.1.

The record
Technical detail
CVSS v4.0
5.4 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00110 · 1.2th percentile
Weakness
CWE-377 · Insecure Temporary File
Published
2026-01-06T21:24Z
EPSS history
Timeline
  • 06 JAN 21:24Z
    Quartus Prime Pro Edition Advisory
    cvelistv5