CVE-2025-27713CWE-787

CVE-2025-27713

High · published November 11, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
2.2
In the wild
Unconfirmed
What it is

⚡ Out-of-bounds write lurking in Intel QAT Windows software could let a crafty attacker escalate privileges without breaking a sweat! 🔥 Think of it like a mischievous guest at a hotel managing to sneak into a restricted area — if they know the right codes, they can access all sorts of confidential information without anyone noticing! If exploited, an attacker with local access could gain the keys to the kingdom, enabling them to manipulate system settings and data at will. This could lead to devastating breaches in confidentiality, integrity, and availability, potentially allowing unauthorized users to tamper with or destroy critical system components.

Put simply

Think of it like a mischievous guest at a hotel managing to sneak into a restricted area — if they know the right codes, they can access all sorts of confidential information without anyone noticing! This vulnerability arises from an out-of-bounds write in the Intel QAT Windows software prior to version 2.6.0, which could allow attackers to write data outside the intended memory boundaries, leading to privilege escalation without user interaction.

What to do

If exploited, an attacker with local access could gain the keys to the kingdom, enabling them to manipulate system settings and data at will. This could lead to devastating breaches in confidentiality, integrity, and availability, potentially allowing unauthorized users to tamper with or destroy critical system components. Update your Intel QAT Windows software to version 2.6.0 or later to patch this vulnerability. Regularly audit user privileges and consider implementing added security measures for local access. 🔒 You've got this! Follow these steps, and protect your systems like the security hero you are! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00127 · 2.2th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-11-11T22:15Z
Affected products (1)
ProductVersionsFixed in
intel/quickassist_technology< 2.6.0-00182.6.0-0018
References (1)
EPSS history
Timeline
  • 11 NOV 16:50Z
    Out-of-bounds write for some Intel(R) QAT Windows software before version 2.6.0
    cvelistv5