CVE-2025-14614
Last modified
CVE-2025-14614 is a medium-severity vulnerability rated 6.7/10 on the CVSS scale. Insecure Temporary File vulnerability in Altera Quartus Prime Standard Installer (SFX) on Windows, Altera Quartus Prime Lite Installer (SFX) on Windows allows Explore for Predictable Temporary File Names.This issue affects Quartus Prime Standard: from 23.1 through 24.1; Quartus Prime Lite: from 23.1 through 24.1.. EPSS estimates a 0.09% chance of exploitation in the next 30 days.
Description
Insecure Temporary File vulnerability in Altera Quartus Prime Standard Installer (SFX) on Windows, Altera Quartus Prime Lite Installer (SFX) on Windows allows Explore for Predictable Temporary File Names.This issue affects Quartus Prime Standard: from 23.1 through 24.1; Quartus Prime Lite: from 23.1 through 24.1.
Metrics
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Intel | Quartus Prime | >= 23.1, < 25.1 |
References
- https://www.altera.com/security/security-advisory/asa-0005Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-14614?
How severe is CVE-2025-14614?
How do I fix CVE-2025-14614?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-14609The Wise Analytics plugin for WordPress is vulnerable to Mis…5.3
- CVE-2025-1461Improper neutralization of the value of the 'eventMoreText' …5.6
- CVE-2025-14610The TableMaster for Elementor plugin for WordPress is vulner…7.2
- CVE-2025-14611Gladinet CentreStack and Triofox prior to version 16.12.1042…9.8
- CVE-2025-14612Insecure Temporary File vulnerability in Altera Quartus Prim…6.7
- CVE-2025-14613The GetContentFromURL plugin for WordPress is vulnerable to …7.2
- CVE-2025-14615The DASHBOARD BUILDER – WordPress plugin for Charts and Grap…7.1
- CVE-2025-14616The Recooty – Job Widget (Old Dashboard) plugin for WordPres…4.3
- CVE-2025-14617A vulnerability has been found in Jehovahs Witnesses JW Libr…5.3
- CVE-2025-14618The Sweet Energy Efficiency plugin for WordPress is vulnerab…4.3
- CVE-2025-14619A vulnerability was found in code-projects Student File Mana…9.8
- CVE-2025-14620A vulnerability was determined in code-projects Student File…9.8
Are you affected by CVE-2025-14614?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST