Intel QAT Windows software vulnerabilities

Intel(R) QAT Windows software before version 2.6.0 contains a buffer overflow in Ring 3 (user applications) that may allow denial of service. The attack requires an authenticated user and local access, with no user interaction.

Improper conditions check in some Intel(R) QAT Windows software before version 2.6.0 within Ring 3 (user applications) may allow a denial of service. The attack requires an authenticated user and local access, with impact limited to availability (low).

Out-of-bounds write for some Intel(R) QAT Windows software before version 2.6.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege via local access without special internal knowledge and requires no user interaction.