CVE-2020-8737

Published: Nov 12, 2020Modified: Jun 17, 2026

6.8

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.9 / Impact: 5.9

Source: NVD

Description

Improper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro software before version 20.1 may allow an unauthenticated user to potentially enable escalation of privilege and/or information disclosure via physical access.

Affected (2)

Products: Intel: Quartus Prime, Stratix 10 Fpga Firmware

2 products

Stratix 10 Fpga Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Intel Quartus Prime	Before 20.1

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Stratix 10 Fpga Firmware	All versions

Running on/with	Platform Versions
Intel Stratix 10 Fpga	All versions

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00388

Source: secure@intel.com

PatchVendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00388

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.