Vulnerability Description
Buffer overflow in some Intel(R) QAT drivers for Windows - HW Version 1.0 before version 1.10 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Intel | Quickassist Technology Library | < 22.07.1 |
| Microsoft | Windows | - |
| Intel | Quickassist Technology | >= 1.0, < 1.10 |
| Intel | Quickassist Technology Firmware | - |
Related Weaknesses (CWE)
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00861.Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00861.Vendor Advisory
FAQ
What is CVE-2023-28741?
CVE-2023-28741 is a vulnerability with a CVSS score of 7.9 (HIGH). Buffer overflow in some Intel(R) QAT drivers for Windows - HW Version 1.0 before version 1.10 may allow an authenticated user to potentially enable escalation of privilege via local access.
How severe is CVE-2023-28741?
CVE-2023-28741 has been rated HIGH with a CVSS base score of 7.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-28741?
Check the references section above for vendor advisories and patch information. Affected products include: Intel Quickassist Technology Library, Microsoft Windows, Intel Quickassist Technology, Intel Quickassist Technology Firmware.