Altera Quartus Prime Pro Uncontrolled Search Path Element Vulnerability Allowing Search Order Hijacking

A vulnerability allowing search order hijacking has been identified in Altera Quartus Prime Pro Edition for Windows, specifically within the System Console utility. This vulnerability, categorized as an uncontrolled search path element issue, affects versions 17.0 through 25.1.1. The vulnerability arises from a current working directory planting attack, which could potentially lead to unauthorized privilege escalation.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation.

Remediation

Users are advised to upgrade to Quartus Prime Pro Edition 25.1.1 or later. For those using Quartus Prime Pro Edition Programmer and Tools, version 25.1.1 or later should be used.