This vulnerability involves a null pointer dereference in Intel(R) QAT software drivers for Windows prior to version 1.13, which can be exploited by an unprivileged authenticated user with local access to cause a denial of service. The attack complexity is low and does not require user interaction or special internal knowledge. The impact is limited to availability, with no direct confidentiality or integrity compromise. The CVSS 4.0 vector indicates local attack vector, low attack complexity, no privileges required beyond authenticated user, no user interaction, low confidentiality impact, no integrity or availability impact beyond denial of service, and no scope change.

The vulnerability can cause denial of service on affected systems running Intel(R) QAT software drivers for Windows before version 1.13. Confidentiality and integrity impacts are minimal or none. The availability impact is high due to potential system disruption. There are no reported exploits in the wild, and the attack requires local authenticated access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users and monitor for unusual application crashes related to Intel QAT drivers. No official remediation or temporary fix has been documented at this time.