Intel QAT Software Drivers for Windows Null Pointer Dereference Vulnerability Allowing Denial of Service

A null pointer dereference vulnerability has been identified in some Intel QAT software drivers for Windows, prior to version 2.6.0. This vulnerability, which exists within Ring 3: User Applications, may lead to a denial of service. It can be exploited by an unprivileged software adversary with an authenticated user status, using a low complexity attack. The issue may arise through local access, without the need for special internal knowledge or user interaction.

Impact

Exploitation of this vulnerability causes a null pointer dereference, leading to a denial of service condition on the affected system.

Remediation

Users are advised to update Intel QAT software drivers for Windows to version 2.6.0 or later. The latest version can be downloaded from the Intel Download Center.