Null Pointer Dereference in Intel(R) QAT Software Drivers for Windows

CVE-2026-20914

What is CVE-2026-20914?

A null pointer dereference vulnerability exists in certain Intel QAT software drivers for Windows prior to version 2.6.0. This issue might enable a denial of service under specific conditions, allowing an unauthenticated software adversary with access to locally deployed applications to exploit the flaw. The attack is characterized by its low complexity, requiring minimal technical knowledge for exploitation, and does not necessitate user interaction. The vulnerability primarily threatens the availability of the system, impacting its operational integrity significantly.

References