Intel R Qat Software Drivers For Windows
Monthly
Null pointer dereference in Intel Quick Assist Technology (QAT) software drivers for Windows before version 2.6.0 enables denial of service by local authenticated users operating within Ring 3 (user-space). The flaw requires low complexity and no user interaction, allowing a low-privileged local adversary to crash the affected driver component, producing availability loss with no confidentiality or integrity impact. No active exploitation is confirmed (not in CISA KEV), and EPSS sits at 0.01% (3rd percentile), indicating negligible real-world exploitation activity at time of analysis.
Denial of service in Intel Quick Assist Technology (QAT) software drivers for Windows before version 2.6 can be triggered by a low-privileged local user through improper input validation at the Ring 3 (user application) boundary. An authenticated but unprivileged local attacker can cause high availability impact to the affected system with low complexity, also producing minor confidentiality and integrity side effects. No public exploit code has been identified at time of analysis, and SSVC assessment classifies exploitation as none with non-automatable attack surface.
Divide-by-zero in Intel Quick Assist Technology (QAT) software drivers for Windows before version 1.13 allows a low-privileged authenticated local user to cause a denial of service. The flaw resides in the Ring 3 (user application) layer of the driver stack, meaning no kernel-level access or elevated privileges are required to trigger the crash. No active exploitation has been identified - EPSS is 0.01% at the 3rd percentile, the vulnerability is absent from the CISA KEV catalog, and SSVC rates exploitation as 'none' with automatable set to 'no.'
Intel QAT (Quick Assist Technology) software drivers for Windows before version 1.13 contain an unchecked return value flaw in Ring 3 user-space application code, enabling a local authenticated attacker to cause a denial of service. The vulnerability carries a CVSS 4.0 score of 4.8 with strictly local access and low-privilege requirements, limiting blast radius to availability of the affected system only. No public exploit code exists and CISA has not listed this in KEV; EPSS at the 3rd percentile and SSVC exploitation status of 'none' confirm this is currently theoretical rather than actively targeted.
Buffer overflow in Intel QAT (Quick Assist Technology) software drivers for Windows before version 1.13 allows an authenticated local user to trigger a denial of service condition via the Ring 3 user-application interface. The flaw (CWE-120) resides in the user-space driver layer and does not require special internal knowledge or user interaction to exploit, though local authenticated access is a hard prerequisite. No active exploitation has been identified (not in CISA KEV), and EPSS remains at the 3rd percentile, placing real-world risk firmly in the low-to-medium range despite a moderate CVSS 4.0 score of 6.9.
Null pointer dereference in Intel QAT (Quick Assist Technology) software drivers for Windows before version 1.13 permits a low-privileged authenticated local user to crash the driver's Ring 3 user-mode component, causing a denial of service with high availability impact and minor confidentiality exposure. No active exploitation is confirmed - the vulnerability is absent from CISA KEV, EPSS sits at 0.01% (3rd percentile), and SSVC classifies exploitation status as none. Real-world risk is constrained to environments with Intel QAT explicitly deployed, which is typical of data-center and high-performance computing workloads rather than general enterprise endpoints.
Improper input validation in Intel Quick Assist Technology (QAT) software drivers for Windows prior to version 1.13 allows a local authenticated user to trigger a denial of service condition. The flaw resides in the Ring 3 (user-space application) layer of the driver stack, meaning an unprivileged but authenticated local adversary can cause high availability impact - potentially crashing the driver or the system - with minor confidentiality and integrity side effects. No public exploit code has been identified at time of analysis, EPSS sits at 0.02% (6th percentile), and CISA SSVC classifies exploitation as none and the attack as non-automatable, indicating negligible current threat activity.
Null pointer dereference in Intel Quick Assist Technology (QAT) software drivers for Windows before version 2.6.0 enables denial of service by local authenticated users operating within Ring 3 (user-space). The flaw requires low complexity and no user interaction, allowing a low-privileged local adversary to crash the affected driver component, producing availability loss with no confidentiality or integrity impact. No active exploitation is confirmed (not in CISA KEV), and EPSS sits at 0.01% (3rd percentile), indicating negligible real-world exploitation activity at time of analysis.
Denial of service in Intel Quick Assist Technology (QAT) software drivers for Windows before version 2.6 can be triggered by a low-privileged local user through improper input validation at the Ring 3 (user application) boundary. An authenticated but unprivileged local attacker can cause high availability impact to the affected system with low complexity, also producing minor confidentiality and integrity side effects. No public exploit code has been identified at time of analysis, and SSVC assessment classifies exploitation as none with non-automatable attack surface.
Divide-by-zero in Intel Quick Assist Technology (QAT) software drivers for Windows before version 1.13 allows a low-privileged authenticated local user to cause a denial of service. The flaw resides in the Ring 3 (user application) layer of the driver stack, meaning no kernel-level access or elevated privileges are required to trigger the crash. No active exploitation has been identified - EPSS is 0.01% at the 3rd percentile, the vulnerability is absent from the CISA KEV catalog, and SSVC rates exploitation as 'none' with automatable set to 'no.'
Intel QAT (Quick Assist Technology) software drivers for Windows before version 1.13 contain an unchecked return value flaw in Ring 3 user-space application code, enabling a local authenticated attacker to cause a denial of service. The vulnerability carries a CVSS 4.0 score of 4.8 with strictly local access and low-privilege requirements, limiting blast radius to availability of the affected system only. No public exploit code exists and CISA has not listed this in KEV; EPSS at the 3rd percentile and SSVC exploitation status of 'none' confirm this is currently theoretical rather than actively targeted.
Buffer overflow in Intel QAT (Quick Assist Technology) software drivers for Windows before version 1.13 allows an authenticated local user to trigger a denial of service condition via the Ring 3 user-application interface. The flaw (CWE-120) resides in the user-space driver layer and does not require special internal knowledge or user interaction to exploit, though local authenticated access is a hard prerequisite. No active exploitation has been identified (not in CISA KEV), and EPSS remains at the 3rd percentile, placing real-world risk firmly in the low-to-medium range despite a moderate CVSS 4.0 score of 6.9.
Null pointer dereference in Intel QAT (Quick Assist Technology) software drivers for Windows before version 1.13 permits a low-privileged authenticated local user to crash the driver's Ring 3 user-mode component, causing a denial of service with high availability impact and minor confidentiality exposure. No active exploitation is confirmed - the vulnerability is absent from CISA KEV, EPSS sits at 0.01% (3rd percentile), and SSVC classifies exploitation status as none. Real-world risk is constrained to environments with Intel QAT explicitly deployed, which is typical of data-center and high-performance computing workloads rather than general enterprise endpoints.
Improper input validation in Intel Quick Assist Technology (QAT) software drivers for Windows prior to version 1.13 allows a local authenticated user to trigger a denial of service condition. The flaw resides in the Ring 3 (user-space application) layer of the driver stack, meaning an unprivileged but authenticated local adversary can cause high availability impact - potentially crashing the driver or the system - with minor confidentiality and integrity side effects. No public exploit code has been identified at time of analysis, EPSS sits at 0.02% (6th percentile), and CISA SSVC classifies exploitation as none and the attack as non-automatable, indicating negligible current threat activity.