PT-2025-46433 · Intel · Intel Quickassist Technology

Published 2025-11-11 · Updated 2025-11-26 · CVE-2025-33000

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel QuickAssist Technology versions prior to 2.6.0

Description A flaw exists in Intel QuickAssist Technology that, due to improper input validation within Ring 3 User Applications, could allow an attacker to escalate privileges. A system software adversary with authenticated user access and a low complexity attack may exploit this issue. This requires local access and does not need user interaction. The issue may impact the confidentiality, integrity, and availability of the system.

Recommendations Update to version 2.6.0 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-33000

Affected Products

Intel Quickassist Technology

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-33000 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01373.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-33000 · Vendor Advisory
• https://twitter.com/CveTodo/status/1988308508937232452 · Twitter Post
• https://t.me/cveNotify/144105 · Telegram Post
• https://twitter.com/CveFindCom/status/1988331556222452177 · Twitter Post
• https://twitter.com/CVEnew/status/1988303448409076160 · Twitter Post