This vulnerability affects Intel(R) QAT software drivers for Windows prior to version 2.6 and is caused by improper input validation within user-mode (Ring 3) components. An authenticated local attacker with low privileges can exploit this flaw to cause a denial of service condition. The CVSS 4.0 base score is 6.9, reflecting a medium severity with local attack vector, low attack complexity, no user interaction, and partial impacts on confidentiality, integrity, and high impact on availability. The vulnerability does not require special internal knowledge and can be triggered without user interaction. No vendor advisory or patch information is currently available.

The vulnerability allows a local, authenticated, low-privileged user to cause a denial of service in affected Intel QAT software drivers, impacting system availability. Confidentiality and integrity impacts are rated low and are not expected to result in further compromise. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit access to systems running vulnerable versions of Intel QAT software drivers to trusted users only. Monitor vendor communications for updates regarding patches or mitigations.