PT-2025-46404 · Microsoft+1 · Windows+1

Published 2025-11-11 · Updated 2025-11-26 · CVE-2025-26694

Positive Technologies (AI Summary)

CVSS v4.0

6.8

Medium

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Intel(R) QAT Windows software versions prior to 2.6.0

Description A null pointer dereference issue exists in some Intel(R) QAT Windows software. This can potentially lead to a denial of service. A system software adversary with an authenticated user and a low complexity attack may be able to enable denial of service via local access. The issue impacts the availability of the vulnerable system.

Recommendations Update to version 2.6.0 or later.

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2025-26694

Affected Products

Intel Qat

Windows

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-26694 · Security Note
• https://osv.dev/vulnerability/CVE-2025-26694 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01373.html · Vendor Advisory
• https://t.me/cveNotify/144097 · Telegram Post
• https://twitter.com/CVEnew/status/1988303476984824202 · Twitter Post