Altera Quartus Prime Standard and Lite Installers Insecure Temporary File Vulnerability

A vulnerability allowing binary planting attacks has been identified in the Altera Quartus Prime Standard and Lite Edition Installers (SFX) for Windows, versions 23.1 prior to 24.1. This vulnerability arises from insecure temporary file handling, which could be exploited to escalate privileges. The issue is not present in the Linux versions of the software.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation.

Remediation

Users are advised to upgrade to the Quartus 25.1 Standard Edition installer or Quartus 25.1 Lite Edition installer. For those using older versions of Quartus Prime Standard or Lite, downloading the individual installation files directly from the Altera download page will avoid this issue, as these files are not affected by the vulnerability.