CVE-2022-34157

HIGH 7.8CVE-2022-34157 · Published 16/02/2023 · updated 17/06/2026

In short

CVE-2022-34157 is a HIGH (CVSS 7.8) vulnerability affecting fpga software development kit (intel), quartus prime (intel).
Chance of exploitation in the next 30 days (EPSS): 0.17%, higher than 6.2% of all vulnerabilities.
Fix: update to 22.1, 21.1, 21.3 or later.

Package	Affected versions	Patched versions
fpga software development kit intel	`< 22.1`	`22.1`
quartus prime intel	`< 21.1< 21.3`	`21.121.3`

Description

Improper access control in the Intel(R) FPGA SDK for OpenCL(TM) with Intel(R) Quartus(R) Prime Pro Edition software before version 22.1 may allow authenticated user to potentially enable escalation of privilege via local access.

References

intel.com/content/www/us/en/security-center/advisory/intel-sa-00728.html · Vendor Advisory

More vulnerabilities in fpga software development kit

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free