Medium severity · published Dec 11, 2025
CVE-2025-13663
Quartus Prime Pro Edition Installer Advisory
6.7
CVSS
0.1%
EPSS
No
On KEV
Description
Under certain circumstances, the Quartus Prime Pro Installer for Windows does not check the permissions of the Quartus target installation directory if the target installation directory already exists.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QP
Quartus Prime Pro · Altera
17.0 through 24.3.1 · source: vendor
QP
Quartus Prime · Intel
before 25.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-13663
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-13663
Vendor Advisory
https://www.altera.com/security/security-advisory/asa-0001
More from Quartus Prime Pro
6.7
CVE-2025-14612
Quartus Prime Pro Edition Advisory
6.7
CVE-2025-14605
Quartus Prime Pro Edition Advisory
6.7
CVE-2025-14596
Quartus Prime Pro Edition Installer Advisory
6.7
CVE-2025-13668
Quartus Prime Pro Edition Advisory