Vulnerabilities > Intel > Quartus Prime

DATE CVE VULNERABILITY TITLE RISK
2022-02-09 CVE-2021-44454 Improper Input Validation vulnerability in Intel Quartus Prime
Improper input validation in a third-party component for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-20
7.8
2022-02-09 CVE-2022-21174 Unspecified vulnerability in Intel Quartus Prime
Improper access control in a third-party component of Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel
7.8
2022-02-09 CVE-2022-21203 Improper Preservation of Permissions vulnerability in Intel Quartus Prime
Improper permissions in the SafeNet Sentinel driver for Intel(R) Quartus(R) Prime Standard Edition before version 21.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-281
7.8
2022-02-09 CVE-2022-21204 Incorrect Default Permissions vulnerability in Intel Quartus Prime
Improper permissions for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-276
7.8
2022-02-09 CVE-2022-21205 XXE vulnerability in Intel Quartus Prime
Improper restriction of XML external entity reference in DSP Builder Pro for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an unauthenticated user to potentially enable information disclosure via network access.
network
low complexity
intel CWE-611
7.5
2022-02-09 CVE-2022-21220 XXE vulnerability in Intel Quartus Prime
Improper restriction of XML external entity for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-611
7.8
2020-11-12 CVE-2020-24454 XXE vulnerability in Intel Quartus Prime
Improper Restriction of XML External Entity Reference in subsystem forIntel(R) Quartus(R) Prime Pro Edition before version 20.3 and Intel(R) Quartus(R) Prime Standard Edition before version 20.2 may allow unauthenticated user to potentially enable information disclosure via network access.
network
low complexity
intel CWE-611
7.5
2020-11-12 CVE-2020-8767 Improper Handling of Exceptional Conditions vulnerability in Intel Quartus Prime
Uncaught exception in the Intel(R) 50GbE IP Core for Intel(R) Quartus Prime before version 20.2 may allow an authenticated user to potentially enable denial of service via local access.
local
low complexity
intel CWE-755
5.5
2020-11-12 CVE-2020-8737 Unspecified vulnerability in Intel Quartus Prime and Stratix 10 Fpga Firmware
Improper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro software before version 20.1 may allow an unauthenticated user to potentially enable escalation of privilege and/or information disclosure via physical access.
low complexity
intel
6.8
2019-12-16 CVE-2019-14604 NULL Pointer Dereference vulnerability in Intel Quartus Prime
Null pointer dereference in the FPGA kernel driver for Intel(R) Quartus(R) Prime Pro Edition before version 19.3 may allow an authenticated user to potentially enable denial of service via local access.
local
low complexity
intel CWE-476
5.5