Out-of-Bounds Write Vulnerability in Intel QuickAssist Technology Software
CVE-2024-31858

7.3HIGH

Key Information:

Vendor

Intel
Status
Intel(r) Quickassist Technology Software
Vendor
CVE Published:
12 February 2025

What is CVE-2024-31858?

An out-of-bounds write vulnerability in Intel QuickAssist Technology software prior to version 2.2.0 allows authenticated users with local access to potentially escalate their privileges, posing significant security risks. This vulnerability exploits memory handling errors, enabling unauthorized operations within the system.

Affected Version(s)

Intel(R) QuickAssist Technology software before version 2.2.0

References

https://intel.com/content/www/us/en/security-center/advis...

CVSS V4

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.