Intel Quickassist Technology vulnerabilities

CVE-2026-20771 [MEDIUM] CWE-476 CVE-2026-20771: Null pointer dereference for some Intel(R) QAT software drivers for Windows before version 1.13 with Null pointer dereference for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack r

CVE-2025-27710 [MEDIUM] CWE-822 CVE-2025-27710: Untrusted pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ri Untrusted pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an information disclosure. System software adversary with an authenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when attack requiremen

CVE-2025-32446 [MEDIUM] CWE-822 CVE-2025-32446: Untrusted pointer dereference for some Intel QuickAssist Technology software before version 2.6.0 wi Untrusted pointer dereference for some Intel QuickAssist Technology software before version 2.6.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may potentially occur via local access when attac

CVE-2018-12193 [MEDIUM] CVE-2018-12193: Insufficient access control in driver stack for Intel QuickAssist Technology for Linux before versio Insufficient access control in driver stack for Intel QuickAssist Technology for Linux before version 4.2 may allow an unprivileged user to potentially disclose information via local access.

CVE-2026-20881 [MEDIUM] CWE-369 CVE-2026-20881: Divide by zero for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: Divide by zero for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirement

CVE-2022-21239 [MEDIUM] CWE-125 CVE-2022-21239: Out-of-bounds read in software for the Intel QAT Driver for Windows before version 1.9.0-0008 may al Out-of-bounds read in software for the Intel QAT Driver for Windows before version 1.9.0-0008 may allow an authenticated user to potentially enable information disclosure via local access.

CVE-2022-41771 [MEDIUM] CWE-732 CVE-2022-41771: Incorrect permission assignment for critical resource in some Intel(R) QAT drivers for Windows befor Incorrect permission assignment for critical resource in some Intel(R) QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentially enable information disclosure via local access.

CVE-2022-41621 [MEDIUM] CWE-284 CVE-2022-41621: Improper access control in some Intel(R) QAT drivers for Windows before version 1.9.0 may allow an a Improper access control in some Intel(R) QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentially enable information disclosure via local access.

CVE-2025-26694 [MEDIUM] CWE-476 CVE-2025-26694: Null pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: Null pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are

CVE-2026-20914 [MEDIUM] CWE-476 CVE-2026-20914: Null pointer dereference for some Intel(R) QAT software drivers for Windows before version 2.6.0 wit Null pointer dereference for some Intel(R) QAT software drivers for Windows before version 2.6.0 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack

CVE-2024-31153 [MEDIUM] CWE-20 CVE-2024-31153: Improper input validation for some Intel(R) QuickAssist Technology software before version 2.2.0 may Improper input validation for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial of service via local access.

CVE-2025-31937 [MEDIUM] CWE-125 CVE-2025-31937: Out-of-bounds read for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Out-of-bounds read for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not pr

CVE-2022-41808 [MEDIUM] CWE-92 CVE-2022-41808: Improper buffer restriction in software for the Intel QAT Driver for Linux before version 1.7.l.4.12 Improper buffer restriction in software for the Intel QAT Driver for Linux before version 1.7.l.4.12 may allow an authenticated user to potentially enable denial of service via local access.

CVE-2025-20090 [MEDIUM] CWE-822 CVE-2025-20090: Untrusted Pointer Dereference for some Intel(R) QuickAssist Technology software before version 2.5.0 Untrusted Pointer Dereference for some Intel(R) QuickAssist Technology software before version 2.5.0 may allow an authenticated user to potentially enable denial of service via local access.

CVE-2025-30509 [LOW] CWE-20 CVE-2025-30509: Improper input validation for some Intel QuickAssist Technology software before version 2.6.0 within Improper input validation for some Intel QuickAssist Technology software before version 2.6.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may potentially occur via local access when attack requir

CVE-2025-32088 [LOW] CWE-754 CVE-2025-32088: Improper conditions check for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3 Improper conditions check for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are no

CVE-2026-20793 [LOW] CWE-252 CVE-2026-20793: Unchecked return value for some Intel(R) QAT software drivers for Windows before version 1.13 within Unchecked return value for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requir