Intel QAT Windows Software Null Pointer Dereference Vulnerability Allowing Denial of Service

A null pointer dereference vulnerability has been identified in some Intel QAT Windows software versions prior to 2.6.0. This vulnerability, which resides within Ring 3: User Applications, may lead to a denial of service. It can be exploited by a system software adversary with authenticated user access, using a low complexity attack, potentially through local access. The vulnerability requires no user interaction but does necessitate certain attack conditions and internal knowledge.

Impact

Exploitation of this vulnerability can cause a denial of service, leading to a high impact on the availability of the affected system.

Remediation

Users are advised to update Intel QAT Windows software to version 2.6.0 or later. The latest version can be downloaded from the Intel Download Center.