Uncontrolled Search Path Element Vulnerability in Altera High Level Synthesis Compiler
CVE-2025-13669

5.4MEDIUM

Key Information:

Vendor

Altera

Status
High Level Synthesis Compiler
Vendor
CVE Published:
12 December 2025

What is CVE-2025-13669?

The Altera High Level Synthesis Compiler on Windows is impacted by an uncontrolled search path element vulnerability, which enables search order hijacking. Attackers could possibly exploit this flaw to execute arbitrary code, leveraging a malicious library in place of the intended library, potentially compromising system security. The vulnerability affects versions from 19.1 through 24.3, emphasizing the need for users to update their installations to secure versions.

Affected Version(s)

High Level Synthesis Compiler Windows 19.1 <= 24.3

References

https://www.altera.com/security/security-advisory/asa-0003

CVSS V4

Score:
5.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.