CVE-2018-12193

CVE-2018-12193 describes an insufficient access control in the Intel QuickAssist Technology (QAT) Linux driver stack . The vulnerability permits an unprivileged local user to potentially disclose information. Affected software is the Intel QAT Linux driver prior to version 4.2. The description in...

CVE-2022-21804

The CVE-2022-21804 entry concerns Intel QuickAssist Technology (QAT) Driver. Affected product: Windows Intel QAT Driver prior to version 1.9.0-0008. Root cause: an out-of-bounds write in the Windows driver may allow an authenticated local user to escalate privileges. Impact stated in sources: loc...

CVE-2022-41808

The CVE CVE-2022-41808 affects the Intel QAT Driver for Linux prior to version 1.7.l.4.12. The vulnerability is described as an improper buffer restriction that could allow an authenticated user to cause a denial of service via local access. Public sources in connected documents confirm affected ...

CVE-2023-32641

The CVE-2023-32641 entry affects Intel® QuickAssist Technology (QAT) software for Linux prior to version QAT20.L.1.0.40-00004. The root cause is improper input validation in the firmware, enabling escalation of privilege and denial of service via adjacent access. Impact is described with high sev...

CVE-2024-31858

Intel QuickAssist Technology software before version 2.2.0 is affected by CVE-2024-31858 due to an out-of-bounds write that could allow an authenticated user to escalate privileges via local access. The advisory and related sources consistently identify the affected component as Intel(R) QuickAss...

CVE-2024-29223

CVE-2024-29223 concerns Intel(R) QuickAssist Technology software before version 2.2.0. The issue is an uncontrolled search path that may allow an authenticated user to escalate privileges via local access. Connected Intel advisories also reference related CVEs (CVE-2024-31858, CVE-2023-32277, CVE...

CVE-2023-28741

The CVE-2023-28741 entry concerns buffer overflow in Intel® QuickAssist Technology (QAT) drivers for Windows. Affected: HW Version 1.0 before 1.10. Root cause: a buffer overflow in the driver may allow an authenticated local user to escalate privileges. Impact: local escalation of privilege as de...

CVE-2022-36397

CVE-2022-36397 affects Intel® QuickAssist Technology (QAT) drivers for Linux prior to version 4.17. The issue is caused by incorrect default permissions in the software installer, which may allow an authenticated local user to escalate privileges. Intel’s advisory and Red Hat/NVD/Nessus reference...

CVE-2022-37340

The CVE-2022-37340 issue affects Intel(R) QuickAssist Technology (QAT) drivers for Windows prior to version 1.6. The vulnerability is an uncontrolled search path in the driver, which could allow an authenticated local user to escalate privileges. Public sources (NVD, Red Hat, Intel advisory) alig...

CVE-2022-41621

The CVE-2022-41621 entry concerns Intel(R) QuickAssist Technology (QAT) drivers for Windows. Affected are Windows QAT drivers prior to version 1.9.0, where improper access control may allow an authenticated user to potentially disclose information via local access. The Intel advisory and related ...

CVE-2020-12333

CVE-2020-12333 affects the Intel® QuickAssist Technology (QAT) for Linux prior to version 1.7.l.4.10.0. The issue, described across multiple sources including the Intel advisory, is due to insufficiently protected credentials, which may allow an authenticated user to potentially escalate privileg...

CVE-2022-41771

CVE-2022-41771 concerns Intel® QuickAssist Technology (QAT) drivers for Windows prior to version 1.9.0. The root cause is an incorrect permission assignment for a critical resource , which may allow an authenticated local user to disclose information. The advisory and related listings confirm the...

CVE-2023-28740

CVE-2023-28740 affects Intel® QuickAssist Technology (QAT) drivers for Windows on HW Version 2.0 prior to 2.0.4. The vulnerability is an uncontrolled search path element in the driver components, which could allow an authenticated local-user to escalate privileges. Intel’s advisory and related so...

CVE-2022-21239

Intel QAT Driver for Windows prior to version 1.9.0-0008 contains an out-of-bounds read vulnerability that may enable information disclosure for an authenticated local user. Affected component: Intel® QuickAssist Technology (QAT) Driver for Windows. Root cause: out-of-bounds read in the driver so...

CVE-2022-41699

Intel QuickAssist Technology (QAT) drivers for Windows prior to version 1.9.0 have an incorrect permission assignment that may allow an authenticated user to escalate privileges via local access. Affected products: Intel QAT drivers for Windows before 1.9.0. Impact, as described by Intel: local p...

CVE-2024-31153

CVE-2024-31153 involves Intel(R) QuickAssist Technology software prior to version 2.2.0 with an improper input validation flaw. An authenticated local user may trigger denial of service. Intel recommends updating to version 2.2.0 or later. The issue is documented in Intel’s advisory (INTEL-SA-011...

CVE-2022-40972

Intel QAT drivers for Windows before 1.9.0 have an improper access control flaw that could allow an authenticated local user to escalate privileges. Disclosures identify the affected product as Intel® QuickAssist Technology (QAT) drivers on Windows, with the root cause described as incorrect perm...

CVE-2026-20771

Intel QAT software drivers for Windows are affected by a null pointer dereference in Ring 3 (user mode) prior to version 1.13. The vulnerability can be triggered by an unprivileged, authenticated user with low complexity, via local access, potentially causing a denial of service. Affected compone...

CVE-2026-20782

Intel QAT Windows drivers prior to 1.13 are vulnerable to a buffer overflow in Ring 3 user applications, allowing a local, low-privilege attacker with no user interaction to trigger a denial of service. Impact is High on availability and Low on confidentiality/integrity; upgrading to 1.13+ (or ap...

CVE-2026-20793

CVE-2026-20793 concerns some Intel(R) QAT software drivers for Windows prior to version 1.13. The root cause is an unchecked return value in Ring 3 (User Applications), which may allow a local, low-complexity attack by an authenticated, unprivileged user to cause a denial of service. Impact is li...

CVE-2026-20914

The CVE-2026-20914 entry concerns Intel QAT software drivers for Windows prior to version 2.6.0. The vulnerability is a Null Pointer Dereference in Ring 3 (User Applications) that could allow a Denial of Service. Exploitation requires a local authenticated user with low complexity and no user int...

CVE-2026-20714

Summary: CVE-2026-20714 impacts Intel QAT software drivers for Windows, prior to version 1.13, in Ring 3 (User Applications). The flaw is an out-of-bounds write that may enable privilege escalation. An unprivileged, authenticated user with low attack complexity and no user interaction could abuse...

CVE-2026-20767

CVE-2026-20767 affects Intel(R) QAT software drivers for Windows prior to 1.13. The root cause is improper input validation in Ring 3 (User Applications). This can enable local, low‑complexity privilege escalation by an authenticated, unprivileged user with no required interaction, impacting conf...

CVE-2026-20905

CVE-2026-20905 describes improper input validation in some Intel(R) QAT Windows drivers prior to v2.6 running in Ring 3. An unprivileged, authenticated user with local access and low complexity can cause a denial of service, with potential low impact on confidentiality and integrity but high impa...

CVE-2026-20881

The CVE affects Intel(R) QAT software drivers for Windows prior to version 1.13, with the vulnerability occurring in Ring 3 (user applications). The issue is a divide-by-zero that may allow a denial of service from an unprivileged, authenticated user under low complexity conditions, potentially v...

CVE-2025-20090

CVE-2025-20090 describes an untrusted pointer dereference in Intel(R) QuickAssist Technology software prior to version 2.5.0, which may allow an authenticated user to potentially cause a local-denial-of-service. Affected product: Intel QuickAssist Technology software before 2.5.0. Root cause: unt...

CVE-2026-20717

CVE-2026-20717 describes improper input validation in some Intel QAT software drivers for Windows prior to version 1.13, exploitable in Ring 3 (local). An authenticated, low-privilege user could cause a denial of service with a low=confidentiality and integrity impact and a high availability impa...

CVE-2025-26694

Intel QAT Windows software prior to version 2.6.0 contains a null pointer dereference vulnerability that can be exploited to cause a denial of service. The issue affects Ring 3 (User Applications) and can be triggered by a locally authenticated user with low attack complexity and no user interact...

CVE-2025-32732

Summary (CVE-2025-32732): Intel® QuickAssist Technology (QAT) Windows software pre-2.6.0 is vulnerable to a buffer overflow in the Ring 3 user application, which can be exploited by a local, authenticated, low-complexity attacker to cause a denial of service. Impacts may include low confidentiali...

CVE-2025-24519

CVE-2025-24519 affects Intel® QuickAssist Technology (QAT) Windows software prior to version 2.6.0. The issue is a buffer overflow in Ring 3 user applications that may allow local escalation of privilege with an authenticated, low-complexity attacker and no user interaction. Impact is described a...

CVE-2025-27710

The CVE-2025-27710 entry concerns Intel QAT Windows software prior to version 2.6.0, where an untrusted pointer dereference in Ring 3 user applications can lead to information disclosure. The issue originates from a local access scenario with user authentication and low attack complexity, and no ...

CVE-2025-27713

Intel QAT Windows software prior to version 2.6.0 contains an out-of-bounds write that can allow privilege escalation. The vulnerability affects Ring 3 user applications and may be exploited by an authenticated local attacker with high complexity, requiring no user interaction. Impact is reported...

CVE-2025-31937

CVE-2025-31937 describes an out-of-bounds read in Intel® QuickAssist Technology (QAT) Windows software prior to version 2.6.0. The issue resides in Ring 3 user applications and can allow a system software adversary with an authenticated, low-privilege user to cause a denial of service, potentiall...

CVE-2025-32446

Summary: CVE-2025-32446 affects Intel QuickAssist Technology (QAT) software prior to version 2.6.0. An untrusted pointer dereference in Ring 3 (User Applications) could allow an attacker with local access and an authenticated, low‑complexity user to escalate privileges and potentially manipulate ...

CVE-2025-30509

CVE-2025-30509 concerns Intel QuickAssist Technology (QAT) software on Windows, with versions before 2.6.0 affected. The root cause is improper input validation in Ring 3: User Applications, enabling privilege escalation. An authenticated local user with low attack complexity and no user interact...

CVE-2025-32088

Intel QAT Windows software before version 2.6.0 contains an improper condition check in Ring 3 user-space components, which may allow a locally authenticated low-complexity attacker to cause a denial of service (low availability impact). Affected product: Intel® QuickAssist Technology Windows sof...

CVE-2025-33000

Intel QuickAssist Technology (QAT) software drivers prior to version 2.6.0 are affected by CVE-2025-33000 due to improper input validation in Ring 3 user applications. This could permit local escalation of privileges by an authenticated user with low complexity, requiring no user interaction. Aff...