Intel Quickassist Technology vulnerabilities

CVE-2025-27713 [HIGH] CWE-787 CVE-2025-27713: Out-of-bounds write for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Out-of-bounds write for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requiremen

CVE-2025-33000 [HIGH] CWE-20 CVE-2025-33000: Improper input validation for some Intel QuickAssist Technology before version 2.6.0 within Ring 3: Improper input validation for some Intel QuickAssist Technology before version 2.6.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requireme

CVE-2025-32088 [MEDIUM] CWE-754 CVE-2025-32088: Improper conditions check for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3 Improper conditions check for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are

CVE-2025-31937 [MEDIUM] CWE-125 CVE-2025-31937: Out-of-bounds read for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Out-of-bounds read for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not pr

CVE-2025-27710 [MEDIUM] CWE-822 CVE-2025-27710: Untrusted pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ri Untrusted pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an information disclosure. System software adversary with an authenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when attack requiremen

CVE-2025-30509 [MEDIUM] CWE-20 CVE-2025-30509: Improper input validation for some Intel QuickAssist Technology software before version 2.6.0 within Improper input validation for some Intel QuickAssist Technology software before version 2.6.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may potentially occur via local access when attack req

CVE-2025-32732 [MEDIUM] CWE-120 CVE-2025-32732: Buffer overflow for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User App Buffer overflow for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present w

CVE-2025-32446 [MEDIUM] CWE-822 CVE-2025-32446: Untrusted pointer dereference for some Intel QuickAssist Technology software before version 2.6.0 wi Untrusted pointer dereference for some Intel QuickAssist Technology software before version 2.6.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may potentially occur via local access when attac

CVE-2025-24519 [MEDIUM] CWE-120 CVE-2025-24519: Buffer overflow for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User App Buffer overflow for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may potentially occur via local access when attack requirements are no

CVE-2025-26694 [MEDIUM] CWE-476 CVE-2025-26694: Null pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: Null pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are

CVE-2025-20090 [MEDIUM] CWE-822 CVE-2025-20090: Untrusted Pointer Dereference for some Intel(R) QuickAssist Technology software before version 2.5.0 Untrusted Pointer Dereference for some Intel(R) QuickAssist Technology software before version 2.5.0 may allow an authenticated user to potentially enable denial of service via local access.

CVE-2024-31858 [HIGH] CWE-787 CVE-2024-31858: Out-of-bounds write for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow Out-of-bounds write for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVE-2024-31153 [MEDIUM] CWE-20 CVE-2024-31153: Improper input validation for some Intel(R) QuickAssist Technology software before version 2.2.0 may Improper input validation for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial of service via local access.

CVE-2024-29223 [MEDIUM] CWE-427 CVE-2024-29223: Uncontrolled search path for some Intel(R) QuickAssist Technology software before version 2.2.0 may Uncontrolled search path for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVE-2023-28740 [MEDIUM] CWE-427 CVE-2023-28740: Uncontrolled search path element in some Intel(R) QAT drivers for Windows - HW Version 2.0 before ve Uncontrolled search path element in some Intel(R) QAT drivers for Windows - HW Version 2.0 before version 2.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVE-2023-32641 [HIGH] CWE-20 CVE-2023-32641: Improper input validation in firmware for Intel(R) QAT before version QAT20.L.1.0.40-00004 may allow Improper input validation in firmware for Intel(R) QAT before version QAT20.L.1.0.40-00004 may allow escalation of privilege and denial of service via adjacent access.

CVE-2023-28741 [HIGH] CWE-120 CVE-2023-28741: Buffer overflow in some Intel(R) QAT drivers for Windows - HW Version 1.0 before version 1.10 may al Buffer overflow in some Intel(R) QAT drivers for Windows - HW Version 1.0 before version 1.10 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVE-2022-40972 [MEDIUM] CWE-284 CVE-2022-40972: Improper access control in some Intel(R) QAT drivers for Windows before version 1.9.0 may allow an a Improper access control in some Intel(R) QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVE-2022-41699 [HIGH] CWE-732 CVE-2022-41699: Incorrect permission assignment for critical resource in some Intel(R) QAT drivers for Windows befor Incorrect permission assignment for critical resource in some Intel(R) QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVE-2022-21804 [HIGH] CWE-787 CVE-2022-21804: Out-of-bounds write in software for the Intel QAT Driver for Windows before version 1.9.0-0008 may a Out-of-bounds write in software for the Intel QAT Driver for Windows before version 1.9.0-0008 may allow an authenticated user to potentially enable escalation of privilege via local access.