An unchecked return value in Intel QAT software drivers for Windows prior to version 1.13 can cause a denial of service when user applications interact with the driver from Ring 3. The flaw is a classic unchecked return value vulnerability (CWE-252) that can be exploited by an authenticated local user to disrupt system availability, but offers no threat to confidentiality or integrity.

Intel QAT Windows drivers version 1.12 and earlier, used on Windows operating systems where the QuickAssist Technology drivers are installed. These drivers run at user‑level and provide accelerated cryptographic services to applications.

The CVSS score is 4.8, indicating a moderate severity. EPSS data is not available and the vulnerability is not listed in the CISA KEV catalog, suggesting no widespread exploitation is known. The attack vector is likely local, requiring an authenticated user and low attack complexity, and does not require user interaction. Because the impact is limited to availability and the attack surface is restricted to legitimate users on the same system, the overall risk level is considered moderate. Vigilant monitoring can help detect attempted exploitation.