Insecure Temporary File Vulnerability in Altera Quartus Prime Installers
CVE-2025-14614

5.4MEDIUM

Key Information:

Vendor

Altera

Status
Quartus Prime Standard
Quartus Prime Lite
Vendor
CVE Published:
6 January 2026

What is CVE-2025-14614?

The Altera Quartus Prime Standard and Lite installers for Windows contain an insecure temporary file vulnerability. This flaw allows for predictable temporary file names, which could potentially be exploited by attackers to manipulate or access sensitive information during the installation process. It is essential for users to be aware of this vulnerability and apply the necessary security measures to safeguard their systems.

Affected Version(s)

Quartus Prime Lite Windows 23.1 <= 24.1

Quartus Prime Standard Windows 23.1 <= 24.1

References

https://www.altera.com/security/security-advisory/asa-0005

CVSS V4

Score:
5.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.