CVE-2026-20914: Null Pointer Dereference
Null pointer dereference for some Intel(R) QAT software drivers for Windows before version 2.6.0 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-20914?
CVE-2026-20914 has a moderate severity rating as it can lead to denial of service due to null pointer dereference.
How do I fix CVE-2026-20914?
You can fix CVE-2026-20914 by updating the Intel QuickAssist Technology driver for Windows to version 2.6.0 or later.
What is the impact of CVE-2026-20914?
CVE-2026-20914 can allow a denial of service when exploited by an unprivileged software adversary.
Who is affected by CVE-2026-20914?
Users of Intel QuickAssist Technology drivers for Windows prior to version 2.6.0 are affected by CVE-2026-20914.
Can CVE-2026-20914 be exploited remotely?
CVE-2026-20914 cannot be exploited remotely as it requires an authenticated user for execution.