PT-2025-46407 · Intel · Intel Qat

Published 2025-11-11 · Updated 2025-11-26 · CVE-2025-27710

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel(R) QAT Windows software versions prior to 2.6.0

Description An untrusted pointer dereference exists in some Intel(R) QAT Windows software. This issue, occurring within Ring 3: User Applications, may allow an information disclosure. A system software adversary with an authenticated user and a low complexity attack may enable data exposure. The potential vulnerability may occur via local access when attack requirements are not present, without special internal knowledge, and requires no user interaction. The issue may impact the confidentiality of the vulnerable system.

Recommendations Update to version 2.6.0 or later.

Fix

Untrusted Pointer Dereference

Weakness Enumeration

CWE-822

Related Identifiers

CVE-2025-27710

Affected Products

Intel Qat

References · 5

• https://osv.dev/vulnerability/CVE-2025-27710 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01373.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-27710 · Security Note
• https://twitter.com/CVEnew/status/1988303474086514960 · Twitter Post
• https://t.me/cveNotify/144098 · Telegram Post