Uncontrolled Search Path Element Vulnerability in Altera Quartus Prime Pro

CVE-2025-14605

What is CVE-2025-14605?

An uncontrolled search path element vulnerability exists in Altera Quartus Prime Pro specifically related to the System Console modules on Windows systems. This vulnerability can lead to search order hijacking, allowing malicious actors to exploit the compromised search path, potentially executing arbitrary code. It impacts multiple versions of Quartus Prime Pro, from 17.0 through 25.1.1, making users of these versions susceptible to security breaches. For more information, refer to the security advisory.

References