CVE-2024-31407
MEDIUMIntel(R) High Level Synthesis Compiler <24.1 - Privilege Escalation
Title source: llmDescription
Uncontrolled search path in some Intel(R) High Level Synthesis Compiler software for Intel(R) Quartus(R) Prime Pro Edition Software before version 24.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
Scores
CVSS v3
6.7
EPSS
0.0002
EPSS Percentile
6.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Classification
CWE
CWE-427
Status
draft
Timeline
Published
Nov 13, 2024
Tracked Since
Feb 18, 2026