This vulnerability is an out-of-bounds write in Intel(R) QAT software drivers for Windows prior to version 1.13, occurring within Ring 3 user applications. It allows an attacker with low complexity and local authenticated access to escalate privileges. The CVSS 4.0 score is 8.5, reflecting high impact on confidentiality, integrity, and availability. The vulnerability does not require user interaction and does not rely on special internal knowledge. No vendor advisory or patch information is currently available, and the product is not a cloud service.

Successful exploitation could allow an unprivileged authenticated user to escalate privileges on the affected system, potentially compromising system confidentiality, integrity, and availability at a high level. However, there are no reported exploits in the wild. The vulnerability requires local access and low complexity, making it a significant risk in environments where untrusted users have authenticated local access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official remediation level or patch links are provided, users should monitor Intel's advisories for updates. Until a fix is available, restrict local authenticated access to trusted users only and consider additional access controls to limit exposure.