CVE-2020-12312

Published: Nov 12, 2020Modified: Jun 17, 2026

6.8

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.9 / Impact: 5.9

Source: NVD

Description

Improper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro software before version 20.2 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

Affected (2)

Products: Intel: Quartus Prime Pro, Stratix 10 Fpga Firmware

2 products

Quartus Prime Pro

Stratix 10 Fpga Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Intel Quartus Prime Pro	Before 20.2

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Stratix 10 Fpga Firmware	All versions

Running on/with	Platform Versions
Intel Stratix 10 Fpga	All versions

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00388

Source: secure@intel.com

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00388

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.