Intel QAT Software Drivers for Windows Buffer Overflow Vulnerability Allowing Denial-of-Service

A buffer overflow vulnerability has been identified in some Intel QAT software drivers for Windows, prior to version 1.13. This vulnerability, present in Ring 3: User Applications, may lead to a denial-of-service condition. It can be exploited by an unprivileged software adversary with an authenticated user status, using a low complexity attack. The vulnerability requires local access, without the need for special internal knowledge or user interaction. While the vulnerability itself may have low impacts on confidentiality and integrity, it has a high impact on availability, leading to a complete loss of system confidentiality, integrity, and availability.

Impact

Exploitation of this vulnerability causes a denial-of-service condition, leading to a high impact on the availability of the affected system.

Remediation

Users are advised to update Intel QAT software drivers for Windows to version 1.13 or later. The update is available for download from the Intel Download Center.