CVE-2026-20767

Improper input validation for some IntelR QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege...

CVE-2026-20767

CVE-2026-20767 affects Intel(R) QAT software drivers for Windows prior to 1.13. The root cause is improper input validation in Ring 3 (User Applications). This can enable local, low‑complexity privilege escalation by an authenticated, unprivileged user with no required interaction, impacting conf...

CVE-2026-20714

Out-of-bounds write for some IntelR QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This...

CVE-2026-20914

Null pointer dereference for some IntelR QAT software drivers for Windows before version 2.6.0 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result...

CVE-2026-20881

Divide by zero for some IntelR QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may...

CVE-2026-20782

Buffer overflow for some IntelR QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may...

CVE-2026-20793

Unchecked return value for some IntelR QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result ma...

CVE-2026-20914

Null pointer dereference for some IntelR QAT software drivers for Windows before version 2.6.0 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result...

CVE-2026-20793

Unchecked return value for some IntelR QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result ma...

CVE-2026-20793

CVE-2026-20793 concerns some Intel(R) QAT software drivers for Windows prior to version 1.13. The root cause is an unchecked return value in Ring 3 (User Applications), which may allow a local, low-complexity attack by an authenticated, unprivileged user to cause a denial of service. Impact is li...

CVE-2026-20771

Intel QAT software drivers for Windows are affected by a null pointer dereference in Ring 3 (user mode) prior to version 1.13. The vulnerability can be triggered by an unprivileged, authenticated user with low complexity, via local access, potentially causing a denial of service. Affected compone...

CVE-2026-20771

Null pointer dereference for some IntelR QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result...

PT-2026-40091

Buffer overflow for some IntelR QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may...

Intel® QAT Software Drivers for Windows Advisory 

Summary: Potential security vulnerabilities in some Intel® QuickAssist Technology QAT software drivers for Windows may allow denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2026-20767 Description: Improper input...

PT-2026-40098

Null pointer dereference for some IntelR QAT software drivers for Windows before version 2.6.0 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result...

Unity Linux 20.1050e / 20.1060e Security Update: kernel (UTSA-2026-007393)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007393 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: qat - add param check for DH Reject requests with a source buffer that is bigger than the...

ROS-20260408-73-0003

A vulnerability in the adfdevshutdown function of the drivers/crypto/intel/qat/qatcommon/adfinit.c module of the Linux kernel is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006674)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006674 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix memory leak in RSA When an RSA key represented in form 2 as defined in PKCS 1...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006602)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006602 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: qat - add param check for RSA Reject requests with a source buffer that is bigger than th...

Vulnerability of the qat_dh_compute_value() function in the drivers/crypto/qat/qat_common/qat_asym_algs.c module – a driver for the Linux kernel’s cryptographic accelerator, allowing a hacker to cause a service failure.

Vulnerability of the qatdhcomputevalue function in the drivers/crypto/qat/qatcommon/qatasymalgs.c module – The driver for the Linux kernel’s cryptographic accelerator is vulnerable to integer overflow or cyclic shift attacks. Exploiting this vulnerability could allow an attacker to cause a system...