CVE-2024-38383

Uncontrolled search path for some IntelR QuartusR Prime Pro Edition software for Windows before version 24.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-31407

Uncontrolled search path in some IntelR High Level Synthesis Compiler software for IntelR QuartusR Prime Pro Edition Software before version 24.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-31407

Affected software: Intel® High Level Synthesis Compiler within Intel® Quartus® Prime Pro Edition Software before version 24.1. Vulnerability: Uncontrolled search path that may allow an authenticated user to escalate privileges via local access. Impact: Privilege escalation potential on a local at...

CVE-2024-31407

Uncontrolled search path in some IntelR High Level Synthesis Compiler software for IntelR QuartusR Prime Pro Edition Software before version 24.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-22184

Uncontrolled search path for some IntelR QuartusR Prime Pro Edition Design Software before version 24.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-8812 · Intel · Intel Quartus Prime Pro Edition

Name of the Vulnerable Software and Affected Versions: IntelR QuartusR Prime Pro Edition software for Windows versions prior to 24.2 Description: The issue is related to an uncontrolled search path in the Intel Quartus Prime Pro software, which may allow an authenticated user to potentially enabl...

CVE-2024-21777

Uncontrolled search path in some IntelR QuartusR Prime Pro Edition Design software before version 23.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-24478: Use of Insufficiently Random Values

Use of insufficiently random values for some Intel AgilexR software included as part of IntelR QuartusR Prime Pro Edition for linux before version 22.4 may allow an authenticated user to potentially enable information disclosure via local access...

Design/Logic Flaw

Uncontrolled search path in the IntelR QuartusR Prime Pro edition software before version 22.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel® Quartus® Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00632.html...

PT-2023-13322 · Intel · Intel Quartus Prime Pro +1

Name of the Vulnerable Software and Affected Versions: IntelR Quartus Prime Pro and Standard edition software affected versions not specified Description: The issue is related to insufficient control flow management, which may allow an authenticated user to potentially enable escalation of...

PT-2023-12888 · Intel · Intel Quartus Prime Pro +1

Name of the Vulnerable Software and Affected Versions: IntelR Quartus Prime Pro and Standard edition affected versions not specified Description: The issue is related to improper neutralization in the software, which may allow an authenticated user to potentially enable escalation of privilege vi...

CVE-2022-27233: XML Injection (aka Blind XPath Injection)

XML injection in the QuartusR Prime Programmer included in the IntelR Quartus Prime Pro and Standard edition software may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2022-21205

Improper restriction of XML external entity reference in DSP Builder Pro for IntelR QuartusR Prime Pro Edition before version 21.3 may allow an unauthenticated user to potentially enable information disclosure via network access...

Xxe

Improper restriction of XML external entity reference in DSP Builder Pro for IntelR QuartusR Prime Pro Edition before version 21.3 may allow an unauthenticated user to potentially enable information disclosure via network access...

Input validation

Improper input validation in a third-party component for IntelR QuartusR Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-21220

Improper restriction of XML external entity for IntelR QuartusR Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-21205

Improper restriction of XML external entity reference in DSP Builder Pro for IntelR QuartusR Prime Pro Edition before version 21.3 may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2022-21174

CVE-2022-21174 involves improper access control in a third-party component used by Intel® Quartus® Prime Pro Edition prior to version 21.3, enabling a locally authenticated user to potentially escalate privileges. The vulnerability is documented across multiple sources (NVD, Red Hat, Intel adviso...

Intel Quartus Prime Pro 权限许可和访问控制问题漏洞

Intel Quartus Prime Pro is a set of multi-platform design environments from the U.S. company Intel Intel. The product is primarily used for programming programmable logic devices. Intel Quartus Prime Pro Edition is vulnerable to a privilege licensing and access control issue vulnerability that...