Altera Quartus Prime Pro Edition Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the Quartus Prime Pro Edition Design Software. This issue arises because the Windows installer for Quartus Prime Pro does not properly verify the permissions of the installation directory if it already exists. As a result, under certain conditions, unauthorized users may gain elevated privileges. The vulnerability is not present in the Linux version of the software.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user to gain elevated rights or access within the Quartus Prime Pro environment.

Remediation

Users are advised to upgrade to Quartus Prime Pro Edition version 25.1 or later. If using an earlier version, ensure that the target installation directory does not exist or that any preexisting directory has the appropriate administrative permissions.