CVE-2025-13663
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-12-11

Last updated on: 2025-12-11

Assigner: Altera

Description
Under certain circumstances, the Quartus Prime Pro Installer for Windows does not check the permissions of the Quartus target installation directory if the target installation directory already exists.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-12-11
Last Modified
2025-12-11
Generated
2026-06-16
AI Q&A
2025-12-11
EPSS Evaluated
2026-06-15
NVD
CVE-2025-13663
EUVD
EUVD-2025-202852
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
intel quartus_prime 4.0
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-279 While it is executing, the product sets the permissions of an object in a way that violates the intended permissions that have been specified by the user.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability occurs in the Quartus Prime Pro Installer for Windows where, under certain circumstances, the installer does not verify the permissions of the target installation directory if that directory already exists. This means the installer might proceed without ensuring proper access controls on the installation folder.

Impact Analysis

The impact of this vulnerability could include unauthorized modification or access to the installation directory, potentially allowing an attacker with limited privileges to escalate their access or compromise the integrity of the installed software.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-13663. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart