CVE-2025-13669

Uncontrolled Search Path Element vulnerability in Altera High Level Synthesis Compiler on Windows allows Search Order Hijacking.This issue affects High Level Synthesis Compiler: from 19.1 through 24.3.

CVSS v3 6.7 MEDIUM

6.7^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.altera.com/security/security-advisory/asa-0003	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:intel:high_level_synthesis_compiler:*:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

07 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Vulnerabilidad de Elemento de Ruta de Búsqueda No Controlado en el Compilador de Síntesis de Alto Nivel de Altera en Windows permite el Secuestro de Orden de Búsqueda. Este problema afecta al Compilador de Síntesis de Alto Nivel: desde 19.1 hasta 24.3.

Information

Published : 2025-12-12 03:15

Updated : 2026-10-07 20:10

NVD link : CVE-2025-13669

Mitre link : CVE-2025-13669

CVE.ORG link : CVE-2025-13669

JSON object : View

Products Affected

microsoft

windows

intel

high_level_synthesis_compiler

CWE

CWE-427

Uncontrolled Search Path Element

{"id": "CVE-2025-13669", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-13669", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-12-12T19:53:07.780035Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "04c0172e-9735-4a9d-a92a-fe01fa863447", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}], "cvssMetricV40": [{"type": "Secondary", "source": "04c0172e-9735-4a9d-a92a-fe01fa863447", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 5.4, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "ACTIVE", "attackComplexity": "HIGH", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "04c0172e-9735-4a9d-a92a-fe01fa863447", "affectedData": [{"vendor": "Altera", "product": "High Level Synthesis Compiler", "versions": [{"status": "affected", "version": "19.1", "versionType": "custom", "lessThanOrEqual": "24.3"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}]}], "published": "2025-12-12T03:15:51.723", "references": [{"url": "https://www.altera.com/security/security-advisory/asa-0003", "tags": ["Vendor Advisory"], "source": "04c0172e-9735-4a9d-a92a-fe01fa863447"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "04c0172e-9735-4a9d-a92a-fe01fa863447", "description": [{"lang": "en", "value": "CWE-427"}]}], "descriptions": [{"lang": "en", "value": "Uncontrolled Search Path Element vulnerability in Altera High Level Synthesis Compiler on Windows allows Search Order Hijacking.This issue affects High Level Synthesis Compiler: from 19.1 through 24.3."}, {"lang": "es", "value": "Vulnerabilidad de Elemento de Ruta de B\u00fasqueda No Controlado en el Compilador de S\u00edntesis de Alto Nivel de Altera en Windows permite el Secuestro de Orden de B\u00fasqueda. Este problema afecta al Compilador de S\u00edntesis de Alto Nivel: desde 19.1 hasta 24.3."}], "lastModified": "2026-10-07T20:10:01.970", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:intel:high_level_synthesis_compiler:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EEC7D9F7-7F5B-4121-B408-415B738FEBBB", "versionEndIncluding": "24.3", "versionStartIncluding": "19.1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "04c0172e-9735-4a9d-a92a-fe01fa863447"}