CVE-2024-21777

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

Uncontrolled search path in some Intel(R) Quartus(R) Prime Pro Edition Design software before version 23.4 may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

Vendor	Product	Versions
n/a	Intel(R) Quartus(R) Prime Pro Edition Design software	before version 23.4
intel	quartus_prime_pro	< 23.4

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01055.htmlPatch, Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01055.htmlPatch, Vendor Advisory

Timeline

Published: May 16, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-217787.2A heap-based buffer overflow vulnerability exists in the configuration file mib_init_value_array functionality of Realtek rtl819x Jungle SDK CVE-2024-21787.5A path traversal vulnerability exists in the parisneo/lollms-webui, specifically within the 'copy_to_custom_personas' endpoint in the 'lollm CVE-2024-217807.5Stack-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. Processing a specially crafted command may result in a CVE-2024-217817.2Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to enable information disclosure or deni CVE-2024-217826.7BIG-IP or BIG-IQ Resource Administrators and Certificate Managers who have access to the secure copy (scp) utility but do not have access to CVE-2024-217834.8Integer overflow for some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potentially enable escalation of pr CVE-2024-217847.8Uncontrolled search path for some Intel(R) IPP Cryptography software before version 2021.11 may allow an authenticated user to potentially e CVE-2024-217859.8A leftover debug code vulnerability exists in the Telnet Diagnostic Interface functionality of AutomationDirect P3-550E 1.2.10.9. A speciall CVE-2024-217867.2An OS command injection vulnerability exists in the web interface configuration upload functionality of MC Technologies MC LR Router 2.10.5.CVE-2024-217876.4Inadequate encryption strength for some BMRA software before version 22.08 may allow an authenticated user to potentially enable escalation CVE-2024-217887.8Uncontrolled search path in some Intel(R) GPA software before version 2023.4 may allow an authenticated user to potentially enable escalatio CVE-2024-217897.5When a BIG-IP ASM/Advanced WAF security policy is configured on a virtual server, undisclosed requests can cause an increase in memory resou