Untrusted Pointer Dereference in Intel QuickAssist Technology Software

CVE-2025-32446

What is CVE-2025-32446?

A vulnerability exists in the Intel QuickAssist Technology software prior to version 2.6.0, where an untrusted pointer dereference can lead to privilege escalation. This issue allows an adversary with authenticated system access to potentially manipulate data, enabling them to execute a low-complexity attack without requiring user interaction. Exploitation of this vulnerability may compromise the integrity of the affected system, while the overall confidentiality and availability remain unaffected. Additionally, successful exploitation requires no special internal knowledge, potentially allowing adversaries to escalate privileges and access sensitive data.

References