Intel QAT Software Drivers for Windows Privilege Escalation Vulnerability

A vulnerability allowing out-of-bounds write has been identified in some Intel QAT software drivers for Windows, prior to version 1.13. This vulnerability resides within Ring 3: User Applications, and may allow an escalation of privilege. An unprivileged software adversary with an authenticated user can exploit this vulnerability through a low complexity attack, potentially leading to unauthorized access or control. The issue may be triggered via local access, without the need for special internal knowledge or user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain elevated rights or access within the system.

Remediation

Users are advised to update Intel QAT software drivers for Windows to version 1.13 or later. The latest drivers can be downloaded from the Intel Download Center. For users with Intel QAT hardware version 2.0, drivers version 2.6.0 or later should be installed.