Intel QAT Windows Software Untrusted Pointer Dereference Vulnerability Allowing Information Disclosure

A vulnerability exists in some Intel QAT Windows software versions prior to 2.6.0, involving an untrusted pointer dereference within user applications. This vulnerability may lead to information disclosure. It can be exploited by a system software adversary with authenticated user access, through a low complexity attack, potentially allowing data exposure via local access. The exploitation does not require user interaction but may need special internal knowledge.

Impact

Exploitation of this vulnerability could result in unauthorized information disclosure, with a high impact on system confidentiality.

Remediation

Users are advised to update Intel QAT Windows software to version 2.6.0 or later. The update is available for download from the Intel Download Center.