Intel QAT Windows Driver Security Advisory (INTEL-SA-01387): LPE/DoS CVEs

Intel QAT Software Driver Security Advisory (INTEL-SA-01387) Vulnerability Overview Intel has issued a security advisory regarding the Intel® QuickAssist Technology (QAT) software driver. Multiple potential security vulnerabilities exist within this driver, which could allow an attacker to cause privilege escalation or denial of service (DoS). Key Information: Severity Rating: HIGH Release Date: 2026/05/12 Vulnerability Types: Improper input validation, unchecked pointer dereference, out-of-bounds write, buffer overflow, unchecked return value, divide by zero, etc. Affected Scope The affected product is the Intel® QAT Windows Software Driver, specifically the following versions: Versions prior to 1.13 Versions prior to 2.6 Remediation Intel recommends users update the driver to the following versions to address the vulnerabilities: Version 1.13 or later Version 2.6 or later Download Links: Update for version 1.13: Intel QAT Driver for Windows (Customer Enabling CE) Update for version 2.6: Intel QAT Driver for Windows (Hardware Version 2.0) Detailed Vulnerability List (CVE) CVE-2026-20767: Improper input validation, potentially leading to privilege escalation. CVE-2026-20738: Unchecked pointer dereference, potentially leading to privilege escalation. CVE-2026-20714: Out-of-bounds write, potentially leading to privilege escalation. CVE-2026-20717: Improper input validation, potentially leading to denial of service. CVE-2026-20782: Buffer overflow, potentially leading to denial of service. CVE-2026-20905: Improper input validation, potentially leading to denial of service. CVE-2026-20771: Null pointer dereference, potentially leading to denial of service. CVE-2026-20881: Divide by zero, potentially leading to denial of service. CVE-2026-20914: Unchecked pointer dereference, potentially leading to denial of service. CVE-2026-20793: Unchecked return value, potentially leading to denial of service. (Note: The page does not contain specific POC or exploit code)*

Goal Reached Thanks to every supporter — we hit 100%!

Intel QAT Windows Driver Security Advisory (INTEL-SA-01387): LPE/DoS CVEs