Skip to content
OpenAdvisories

Vendor

Altera

20 known vulnerabilities.

Altera at a glance

Last 12 months
20
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 5 10 December 2025: 6 vulnerabilities Dec 2025 January 2026: 6 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 8 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202680
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202660
Dec 202560
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

20 results · Feed

  • High 8.1

    Unchecked HKDF key-size input in EL3 causes a stack buffer overflow

    Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

  • High 8.1

    Unchecked SDM mailbox response address enables EL3 secure-memory corruption

    Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

  • High 8.1

    Altera SoCFPGA BL31 Mailbox Output Pointer Validation Enables EL3 Secure-Memory Corruption

    Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

  • High 8.1

    Unvalidated SiP v2 mailbox pointers allow non-secure EL1 access to arbitrary physical addresses through EL3.

    Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware: through socfpga_v2.14.0.

  • High 8.1

    Crafted oversized firmware image causes EL3 stack overflow during VAB authentication on Trusted Firmware.

    Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware: through socfpga_v2.14.0.

  • High 8.1

    Systemic Missing Address Validation in SiP SMC Handlers

    Out-of-bounds write vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

  • High 8.1

    Unit Confusion in VAB Authentication

    Incorrect calculation of buffer size vulnerability in Altera Trusted Firmware on HPS allows Overflow Buffers. This issue affects Trusted Firmware: through socfpga_v2.14.0.

  • High 8.1

    EL3 Stack Buffer Overflow in FCS HKDF Request

    Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

  • Medium 6.7

    Quartus® Prime Standard and Quartus® Prime Lite Security Advisory

    Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Standard on Windows (Nios II Command Shell modules), Altera Quartus Prime Lite on Windows (Nios II Command Shell modules) allows Search Order Hijacking.This issue affects Quartus Prime Sta…

  • Medium 6.7

    Quartus® Prime Standard and Quartus® Prime Lite Security Advisory

    Insecure Temporary File vulnerability in Altera Quartus Prime Standard  Installer (SFX) on Windows, Altera Quartus Prime Lite  Installer (SFX) on Windows allows Explore for Predictable Temporary File Names.This issue affects Quartus Prime Standard: from 23.1 …

  • Medium 6.7

    Quartus® Prime Standard and Quartus® Prime Lite Security Advisory

    Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Standard Installer (SFX) on Windows, Altera Quartus Prime Lite  Installer (SFX) on Windows allows Search Order Hijacking.This issue affects Quartus Prime Standard: from 23.1 through 24.1; …

  • Medium 6.7

    Quartus Prime Pro Edition Advisory

    Insecure Temporary File vulnerability in Altera Quartus Prime Pro  Installer (SFX) on Windows allows : Use of Predictable File Names.This issue affects Quartus Prime Pro: from 24.1 through 25.1.1.

  • Medium 6.7

    Quartus Prime Pro Edition Advisory

    Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Pro on Windows (System Console modules) allows Search Order Hijacking.This issue affects Quartus Prime Pro: from 17.0 through 25.1.1.

  • Medium 6.7

    Quartus Prime Pro Edition Installer Advisory

    Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Pro Installer (SFX) on Windows allows Search Order Hijacking.This issue affects Quartus Prime Pro: from 24.1 through 24.3.1.

  • Medium 6.7

    High Level Synthesis Compiler Security Advisory

    The High Level Synthesis Compiler i++ command for Windows is vulnerable to a DLL planting vulnerability

  • Medium 6.7

    High Level Synthesis Compiler Security Advisory

    Uncontrolled Search Path Element vulnerability in Altera High Level Synthesis Compiler on Windows allows Search Order Hijacking.This issue affects High Level Synthesis Compiler: from 19.1 through 24.3.

  • Medium 6.7

    Quartus Prime Standard Security Advisory

    The System Console Utility for Windows is vulnerable to a DLL planting vulnerability

  • Medium 6.7

    Quartus Prime Pro Edition Advisory

    A potential security vulnerability in Quartus® Prime Pro Edition Design Software may allow escalation of privilege.

  • Medium 6.7

    Quartus Prime Standard Security Advisory

    A potential security vulnerability in Quartus® Prime Standard Edition Design Software may allow escalation of privilege.

  • Medium 6.7

    Quartus Prime Pro Edition Installer Advisory

    Under certain circumstances, the Quartus Prime Pro Installer for Windows does not check the permissions of the Quartus target installation directory if the target installation directory already exists.