BaseFortify

Publication date: 2025-11-11

Last updated on: 2025-11-26

Assigner: Intel Corporation

Description

Null pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-11

Last Modified

2025-11-26

Generated

2026-07-06

AI Q&A

2025-11-11

EPSS Evaluated

2026-07-05

NVD

CVE-2025-26694

Affected Vendors & Products

Vendor	Product	Version / Range
intel	quickassist_technology	to 2.6.0-0018 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This vulnerability is a null pointer dereference in some Intel(R) QAT Windows software versions before 2.6.0. It occurs within Ring 3 (user applications) and may allow an authenticated user with low complexity attack methods to cause a denial of service. The attack requires local access and no user interaction, and it does not require special internal knowledge. Essentially, it can cause the affected software to crash or become unavailable.

Impact Analysis

The vulnerability can impact the availability of the vulnerable system by causing a denial of service. It does not affect confidentiality or integrity, but it can make the system or service unavailable to legitimate users.

Hi! I’m here to help you understand CVE-2025-26694. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70