Intel QAT Windows Software Privilege Escalation Vulnerability

A buffer overflow vulnerability has been identified in some Intel QAT Windows software versions prior to 2.6.0. This vulnerability, which exists within Ring 3: User Applications, may allow an escalation of privilege. An authenticated user can exploit this issue through a low complexity attack, potentially leading to unauthorized data manipulation. The vulnerability requires local access and no user interaction, but an attacker must possess special internal knowledge. While the vulnerability itself does not impact system confidentiality, integrity, or availability, it could be exploited to manipulate data in a way that significantly compromises system integrity.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an authenticated user to manipulate data and potentially disrupt normal system operations.

Remediation

Users are advised to update Intel QAT Windows software to version 2.6.0 or later. The latest version can be downloaded from the Intel Download Center.