CVE-2022-21205

HIGH 7.5CVE-2022-21205 · Published 09/02/2022 · updated 17/06/2026

In short

CVE-2022-21205 is a HIGH (CVSS 7.5) vulnerability affecting quartus prime (intel).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 65.3% of all vulnerabilities.
Fix: update to 21.3 or later.

Package	Affected versions	Patched versions
quartus prime intel	`< 21.3`	`21.3`

Description

Improper restriction of XML external entity reference in DSP Builder Pro for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an unauthenticated user to potentially enable information disclosure via network access.

References

intel.com/content/www/us/en/security-center/advisory/intel-sa-00632.html · Vendor Advisory

More vulnerabilities in quartus prime

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

quartus prime

intel

< 21.3

21.3

More vulnerabilities in quartus prime

See all →