Improper handling of exceptional conditions in Intel 50GbE IP Core for Intel Quartus Prime
Priority LOW 25CWE-755Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
Uncaught exception in the Intel(R) 50GbE IP Core for Intel(R) Quartus Prime before version 20.2 may allow an authenticated user to potentially enable denial of service via local access.
Why it matters now
EPSS 0.00275 19th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Intel(R) 50GbE IP Core for Intel(R) Quartus Prime | before version 20.2 | — | No fix listed | CNA |
- Intel(R) 50GbE IP Core for Intel(R) Quartus Prime Vendor— Affected before version 20.2 Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2020-8767
- 2026-10-03 Alias added: GHSA-qqv8-4frh-3wcg
References
More Intel Quartus Prime vulnerabilities
- TI-2022-05600 XML external entity injection in Intel Quartus Prime Pro Edition CVSS 3.1HIGH 7.5
- TI-2022-05613 XML external entity injection in Intel Quartus Prime Pro Edition CVSS 3.1HIGH 7.8
- TI-2022-05574 Improper access control in a third-party component of Intel(R) Quartus(R) Prime Pro… CVSS 3.1HIGH 7.8
- TI-2021-20067 Improper input validation in Intel Quartus Prime Pro Edition CVSS 3.1HIGH 7.8
- TI-2022-20085 Uncontrolled search path in Intel Quartus Prime Pro edition software CVSS 3.1HIGH 7.8
- TI-2022-15073 Improper access control in the Intel(R) FPGA SDK for OpenCL(TM) with Intel(R) Quartus(R)… CVSS 3.1HIGH 7.8
Sources
- CVE-2020-8767 · CVE Program
- CVE-2020-8767 · NVD
- FIRST EPSS
- GHSA-qqv8-4frh-3wcg · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences