Altera — recent CVEs https://vulnogram.org/ Most recent CVEs assigned by Altera (altera). https://vulnogram.org/seaview/icons/altera.png Altera — recent CVEs https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT CVE-2026-58008 · 8.3 HIGH — Unchecked HKDF key-size input in EL3 causes a stack buffer overflow https://vulnogram.org/CVE-2026-58008 https://vulnogram.org/CVE-2026-58008 Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0. High Thu, 24 Sep 2026 14:52:40 GMT CVE-2026-58007 · 8.3 HIGH — Unchecked SDM mailbox response address enables EL3 secure-memory corruption https://vulnogram.org/CVE-2026-58007 https://vulnogram.org/CVE-2026-58007 Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0. High Thu, 24 Sep 2026 14:52:29 GMT CVE-2026-58006 · 8.3 HIGH — Altera SoCFPGA BL31 Mailbox Output Pointer Validation Enables EL3 Secure-Memory Corruption https://vulnogram.org/CVE-2026-58006 https://vulnogram.org/CVE-2026-58006 Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0. High Thu, 24 Sep 2026 14:52:16 GMT CVE-2026-58005 · 8.3 HIGH — Unvalidated SiP v2 mailbox pointers allow non-secure EL1 access to arbitrary physical addresses through EL3. https://vulnogram.org/CVE-2026-58005 https://vulnogram.org/CVE-2026-58005 Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware: through socfpga_v2.14.0. High Thu, 24 Sep 2026 14:52:04 GMT CVE-2026-58004 · 8.3 HIGH — Crafted oversized firmware image causes EL3 stack overflow during VAB authentication on Trusted Firmware. https://vulnogram.org/CVE-2026-58004 https://vulnogram.org/CVE-2026-58004 Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware: through socfpga_v2.14.0. High Thu, 24 Sep 2026 14:51:53 GMT CVE-2026-13467 · 8.3 HIGH — Systemic Missing Address Validation in SiP SMC Handlers https://vulnogram.org/CVE-2026-13467 https://vulnogram.org/CVE-2026-13467 Out-of-bounds write vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0. High Thu, 24 Sep 2026 14:51:41 GMT CVE-2026-13466 · 8.3 HIGH — Unit Confusion in VAB Authentication https://vulnogram.org/CVE-2026-13466 https://vulnogram.org/CVE-2026-13466 Incorrect calculation of buffer size vulnerability in Altera Trusted Firmware on HPS allows Overflow Buffers. This issue affects Trusted Firmware: through socfpga_v2.14.0. High Thu, 24 Sep 2026 14:51:27 GMT CVE-2026-13465 · 8.3 HIGH — EL3 Stack Buffer Overflow in FCS HKDF Request https://vulnogram.org/CVE-2026-13465 https://vulnogram.org/CVE-2026-13465 Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0. High Thu, 24 Sep 2026 14:51:01 GMT CVE-2025-14625 · 6.7 MEDIUM — Quartus® Prime Standard and Quartus® Prime Lite Security Advisory https://vulnogram.org/CVE-2025-14625 https://vulnogram.org/CVE-2025-14625 Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Standard on Windows (Nios II Command Shell modules), Altera Quartus Prime Lite on Windows (Nios II Command Shell modules) allows Search Order Hijacking.This issue affects Quartus… Medium Tue, 06 Jan 2026 21:42:28 GMT CVE-2025-14614 · 6.7 MEDIUM — Quartus® Prime Standard and Quartus® Prime Lite Security Advisory https://vulnogram.org/CVE-2025-14614 https://vulnogram.org/CVE-2025-14614 Insecure Temporary File vulnerability in Altera Quartus Prime Standard Installer (SFX) on Windows, Altera Quartus Prime Lite Installer (SFX) on Windows allows Explore for Predictable Temporary File Names.This issue affects Quartus Prime Standard: fro… Medium Tue, 06 Jan 2026 21:38:05 GMT CVE-2025-14599 · 6.7 MEDIUM — Quartus® Prime Standard and Quartus® Prime Lite Security Advisory https://vulnogram.org/CVE-2025-14599 https://vulnogram.org/CVE-2025-14599 Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Standard Installer (SFX) on Windows, Altera Quartus Prime Lite Installer (SFX) on Windows allows Search Order Hijacking.This issue affects Quartus Prime Standard: from 23.1 throug… Medium Tue, 06 Jan 2026 21:30:14 GMT CVE-2025-14612 · 6.7 MEDIUM — Quartus Prime Pro Edition Advisory https://vulnogram.org/CVE-2025-14612 https://vulnogram.org/CVE-2025-14612 Insecure Temporary File vulnerability in Altera Quartus Prime Pro Installer (SFX) on Windows allows : Use of Predictable File Names.This issue affects Quartus Prime Pro: from 24.1 through 25.1.1. Medium Tue, 06 Jan 2026 21:24:33 GMT CVE-2025-14605 · 6.7 MEDIUM — Quartus Prime Pro Edition Advisory https://vulnogram.org/CVE-2025-14605 https://vulnogram.org/CVE-2025-14605 Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Pro on Windows (System Console modules) allows Search Order Hijacking.This issue affects Quartus Prime Pro: from 17.0 through 25.1.1. Medium Tue, 06 Jan 2026 21:15:56 GMT CVE-2025-14596 · 6.7 MEDIUM — Quartus Prime Pro Edition Installer Advisory https://vulnogram.org/CVE-2025-14596 https://vulnogram.org/CVE-2025-14596 Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Pro Installer (SFX) on Windows allows Search Order Hijacking.This issue affects Quartus Prime Pro: from 24.1 through 24.3.1. Medium Tue, 06 Jan 2026 21:06:19 GMT CVE-2025-13670 · 6.7 MEDIUM — High Level Synthesis Compiler Security Advisory https://vulnogram.org/CVE-2025-13670 https://vulnogram.org/CVE-2025-13670 The High Level Synthesis Compiler i++ command for Windows is vulnerable to a DLL planting vulnerability Medium Fri, 12 Dec 2025 02:34:57 GMT CVE-2025-13669 · 6.7 MEDIUM — High Level Synthesis Compiler Security Advisory https://vulnogram.org/CVE-2025-13669 https://vulnogram.org/CVE-2025-13669 Uncontrolled Search Path Element vulnerability in Altera High Level Synthesis Compiler on Windows allows Search Order Hijacking.This issue affects High Level Synthesis Compiler: from 19.1 through 24.3. Medium Fri, 12 Dec 2025 02:30:28 GMT CVE-2025-13665 · 6.7 MEDIUM — Quartus Prime Standard Security Advisory https://vulnogram.org/CVE-2025-13665 https://vulnogram.org/CVE-2025-13665 The System Console Utility for Windows is vulnerable to a DLL planting vulnerability Medium Fri, 12 Dec 2025 02:18:41 GMT CVE-2025-13668 · 6.7 MEDIUM — Quartus Prime Pro Edition Advisory https://vulnogram.org/CVE-2025-13668 https://vulnogram.org/CVE-2025-13668 A potential security vulnerability in Quartus® Prime Pro Edition Design Software may allow escalation of privilege. Medium Thu, 11 Dec 2025 22:02:39 GMT CVE-2025-13664 · 6.7 MEDIUM — Quartus Prime Standard Security Advisory https://vulnogram.org/CVE-2025-13664 https://vulnogram.org/CVE-2025-13664 A potential security vulnerability in Quartus® Prime Standard Edition Design Software may allow escalation of privilege. Medium Thu, 11 Dec 2025 20:55:02 GMT CVE-2025-13663 · 6.7 MEDIUM — Quartus Prime Pro Edition Installer Advisory https://vulnogram.org/CVE-2025-13663 https://vulnogram.org/CVE-2025-13663 Under certain circumstances, the Quartus Prime Pro Installer for Windows does not check the permissions of the Quartus target installation directory if the target installation directory already exists. Medium Thu, 11 Dec 2025 20:35:24 GMT