Untrusted Pointer Dereference in Intel QAT Windows Software

CVE-2025-27710

What is CVE-2025-27710?

The vulnerability is characterized by an untrusted pointer dereference in Intel QAT Windows software prior to version 2.6.0. This flaw may allow for information disclosure to occur when an attacker with authenticated user privileges exploits the issue through local access. The attack does not require special internal knowledge, making it particularly insidious as lower complexity is involved. As a result, sensitive data may be exposed without any interaction from the user, undermining system confidentiality.

References