Null Pointer Dereference in Intel QAT Software Drivers for Windows

CVE-2026-20771

What is CVE-2026-20771?

A vulnerability exists in the Intel QAT software drivers for Windows prior to version 1.13, where a null pointer dereference can occur. This may allow an attacker with authenticated local access to exploit the issue leading to a denial of service condition. The attack complexity is relatively low, requiring no special internal knowledge, thus posing a risk to system availability. While the vulnerability does not impact confidentiality or integrity, it significantly threatens the availability of the affected systems, making it vital for users to upgrade to version 1.13 or later to mitigate the risks associated with this flaw.

References