← Back

CVE-2025-13663

nvd nist
Published: Dec 11, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.4
Vector
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Show more
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less
Source: 04c0172e-9735-4a9d-a92a-fe01fa863447 (Secondary)

Description

Under certain circumstances, the Quartus Prime Pro Installer for Windows does not check the permissions of the Quartus target installation directory if the target installation directory already exists.

Affected (1)

Products: Intel: Quartus Prime
Intel
1 product
Quartus Prime
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Quartus Prime
Before 25.1
Running on/withPlatform Versions
Microsoft
Windows
All versions

Related CWEs

CWE-279
Incorrect Execution-Assigned Permissions
While it is executing, the product sets the permissions of an object in a way that violates the intended permissions that have been specified by the user.

References (1)

Source: 04c0172e-9735-4a9d-a92a-fe01fa863447
Vendor Advisory

Timeline

No history available yet.