PT-2025-46430 · Intel · Intel Quickassist Technology

Published 2025-11-11 · Updated 2025-11-26 · CVE-2025-32446

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Intel QuickAssist Technology versions prior to 2.6.0

Description An issue exists in Intel QuickAssist Technology software that may allow an escalation of privilege. A local attacker with an authenticated user account and low complexity attack capabilities could potentially manipulate data. This occurs due to an untrusted pointer dereference within Ring 3: User Applications. The issue impacts the integrity of the system. No user interaction is required for exploitation.

Recommendations Update to version 2.6.0 or later.

Fix

Untrusted Pointer Dereference

Weakness Enumeration

CWE-822

Related Identifiers

CVE-2025-32446

Affected Products

Intel Quickassist Technology

References · 5

• https://osv.dev/vulnerability/CVE-2025-32446 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-32446 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01373.html · Vendor Advisory
• https://twitter.com/CVEnew/status/1988303451374354738 · Twitter Post
• https://t.me/cveNotify/144103 · Telegram Post