PT-2026-40317 · Intel · Qat Software Drivers For Windows

Published 2026-05-12 · Updated 2026-05-12 · CVE-2026-20714

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Intel(R) QAT software drivers for Windows versions prior to 1.13

Description An out-of-bounds write issue exists within Ring 3 (the privilege level where user applications run) of certain drivers. An authenticated, unprivileged local adversary can exploit this through a low-complexity attack without requiring user interaction or special internal knowledge to achieve escalation of privilege. This can lead to a high impact on the confidentiality, integrity, and availability of the system.

Recommendations Update Intel(R) QAT software drivers for Windows to version 1.13 or later.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-20714

Affected Products

Qat Software Drivers For Windows

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-20714 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01387.html · Vendor Advisory
• https://twitter.com/CVEnew/status/2054340985551782016 · Twitter Post