DLL Planting Vulnerability in High Level Synthesis Compiler for Windows
CVE-2025-13670

5.4MEDIUM

Key Information:

Vendor

Altera

Status
High Level Synthesis Compiler
Vendor
CVE Published:
12 December 2025

What is CVE-2025-13670?

The High Level Synthesis Compiler for Windows is susceptible to a DLL planting vulnerability, which allows an attacker to execute arbitrary code within the context of the targeted application. This could lead to unauthorized access or data manipulation, emphasizing the need for immediate mitigation. Users should ensure that their software is up to date and follow security best practices to protect against potential exploitation.

Affected Version(s)

High Level Synthesis Compiler Windows 19.1 <= 24.3

References

https://www.altera.com/security/security-advisory/asa-0003

CVSS V4

Score:
5.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.