This vulnerability involves a null pointer dereference in Intel(R) QAT software drivers for Windows prior to version 2.6.0, occurring in user-mode (Ring 3). An authenticated local attacker with low privileges can cause a denial of service condition by triggering this flaw. The attack does not require user interaction or special internal knowledge beyond authentication. The vulnerability affects availability only, with no impact on confidentiality or integrity. The CVSS 4.0 base score is 6.8, indicating a medium severity. No official remediation level or patch information is provided in the available data.

The primary impact is denial of service, which can disrupt the availability of systems running vulnerable Intel QAT software drivers on Windows. There is no impact on confidentiality or integrity. No known exploits have been reported, so active exploitation is not confirmed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, limit access to systems running vulnerable versions to trusted users only, as the attack requires authenticated local access. Monitor vendor communications for updates on remediation.