Intel QAT Software Drivers for Windows Null Pointer Dereference Vulnerability Allowing Denial of Service

A null pointer dereference vulnerability has been identified in some Intel QAT software drivers for Windows, prior to version 1.13. This vulnerability, present within Ring 3: User Applications, may lead to a denial of service. It can be exploited by an unprivileged software adversary with an authenticated user status, using a low complexity attack. The issue may occur through local access, without the need for special internal knowledge or user interaction.

Impact

Exploitation of this vulnerability can cause a denial of service, leading to a high impact on the availability of the affected system.

Remediation

Users are advised to update Intel QAT software drivers for Windows to version 1.13 or later. The latest version can be downloaded from the Intel Download Center.