CVEvulnerability

CVE-2025-13663

5.4 MEDIUM Published 2025-12-11 Modified 2026-10-07 Official page ↗
Status
Analyzed
Published
2025-12-11
Last modified
2026-10-07
Assigner
04c0172e-9735-4a9d-a92a-fe01fa863447
CVSS 4.0 (04c0172e-9735-4a9d-a92a-fe01fa863447)
5.4 MEDIUM — CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 (04c0172e-9735-4a9d-a92a-fe01fa863447)
6.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-279

Description

Under certain circumstances, the Quartus Prime Pro Installer for Windows does not check the permissions of the Quartus target installation directory if the target installation directory already exists.

Affected configurations

• intel quartus prime (< 25.1)

Related

Weakness · CWE (1)

  • CWE-279 Incorrect Execution-Assigned Permissions weakness

References