CVE-2022-36369

Improper access control in some QATzip software maintained by Intel(R) before version 1.0.9 may...

7.8 HighFix available

Improper access control in some QATzip software maintained by Intel(R) before version 1.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.25%Down 0.6 points since Feb 17, 2023

What each source reports

CVE List Score used 7.8

Improper access control in some QATzip software maintained by Intel(R) before version 1.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access.

Record: CVE-2022-36369
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

EUVDEUVD-2022-39083 7.8

Improper access control in some QATzip software maintained by Intel(R) before version 1.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access.

Record: EUVD-2022-39083
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-03

GitHub AdvisoriesGHSA-m7pc-68p2-69vx 7.8

Improper access control in some QATzip software maintained by Intel(R) before version 1.0.9 may...

Improper access control in some QATzip software maintained by Intel(R) before version 1.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access.

Record: GHSA-m7pc-68p2-69vx
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

NVD 7.8

Improper access control in some QATzip software maintained by Intel(R) before version 1.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access.

Record: CVE-2022-36369
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSV 7.8

Improper access control in some QATzip software maintained by Intel(R) before version 1.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access.

Record: CVE-2022-36369
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHBA-2022:7667 7.8

Red Hat Bug Fix Advisory: qatzip bug fix and enhancement update

Record: RHBA-2022:7667
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 5 moreShow less

OSVRHBA-2022:8256 7.8

Red Hat Bug Fix Advisory: qatzip bug fix and enhancement update

Record: RHBA-2022:8256
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:1976 7.8

Red Hat Security Advisory: qatzip security and bug fix update

Record: RHSA-2023:1976
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:3397 7.8

Red Hat Security Advisory: qatzip security and bug fix update

Record: RHSA-2023:3397
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVALBA-2022:7667 No score

Important: qatzip bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record: ALBA-2022:7667
Updated: 2026-11-02

OSVALBA-2022:8256 No score

Important: qatzip bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record: ALBA-2022:8256
Updated: 2026-11-02

Affected products

intel qatzip

Affected packages

Affected packages
Package	Affected	Fixed
`qatzip` AlmaLinux:8	before 1.0.9-1.el8	1.0.9-1.el8
`qatzip-devel` AlmaLinux:8	before 1.0.9-1.el8	1.0.9-1.el8
`qatzip-libs` AlmaLinux:8	before 1.0.9-1.el8	1.0.9-1.el8
`qatzip` AlmaLinux:9	before 1.0.9-1.el9	1.0.9-1.el9
`qatzip-devel` AlmaLinux:9	before 1.0.9-1.el9	1.0.9-1.el9
`qatzip-libs` AlmaLinux:9	before 1.0.9-1.el9	1.0.9-1.el9
`qatzip` Red Hat:enterprise_linux:8::appstream	before 0:1.0.9-1.el8	0:1.0.9-1.el8
`qatzip-debuginfo` Red Hat:enterprise_linux:8::appstream	before 0:1.0.9-1.el8	0:1.0.9-1.el8
`qatzip-debugsource` Red Hat:enterprise_linux:8::appstream	before 0:1.0.9-1.el8	0:1.0.9-1.el8
`qatzip-libs` Red Hat:enterprise_linux:8::appstream	before 0:1.0.9-1.el8	0:1.0.9-1.el8

Show 32 moreShow less

Affected packages
Package	Affected	Fixed
`qatzip-libs-debuginfo` Red Hat:enterprise_linux:8::appstream	before 0:1.0.9-1.el8	0:1.0.9-1.el8
`qatzip-debuginfo` Red Hat:enterprise_linux:8::crb	before 0:1.0.9-1.el8	0:1.0.9-1.el8
`qatzip-debugsource` Red Hat:enterprise_linux:8::crb	before 0:1.0.9-1.el8	0:1.0.9-1.el8
`qatzip-devel` Red Hat:enterprise_linux:8::crb	before 0:1.0.9-1.el8	0:1.0.9-1.el8
`qatzip-libs-debuginfo` Red Hat:enterprise_linux:8::crb	before 0:1.0.9-1.el8	0:1.0.9-1.el8
`qatzip` Red Hat:enterprise_linux:9::appstream	before 0:1.0.9-1.el9	0:1.0.9-1.el9
`qatzip-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:1.0.9-1.el9	0:1.0.9-1.el9
`qatzip-debugsource` Red Hat:enterprise_linux:9::appstream	before 0:1.0.9-1.el9	0:1.0.9-1.el9
`qatzip-libs` Red Hat:enterprise_linux:9::appstream	before 0:1.0.9-1.el9	0:1.0.9-1.el9
`qatzip-libs-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:1.0.9-1.el9	0:1.0.9-1.el9
`qatzip-debuginfo` Red Hat:enterprise_linux:9::crb	before 0:1.0.9-1.el9	0:1.0.9-1.el9
`qatzip-debugsource` Red Hat:enterprise_linux:9::crb	before 0:1.0.9-1.el9	0:1.0.9-1.el9
`qatzip-devel` Red Hat:enterprise_linux:9::crb	before 0:1.0.9-1.el9	0:1.0.9-1.el9
`qatzip-libs-debuginfo` Red Hat:enterprise_linux:9::crb	before 0:1.0.9-1.el9	0:1.0.9-1.el9
`qatzip` Red Hat:rhel_eus:9.0::appstream	before 0:1.1.2-1.el9_0	0:1.1.2-1.el9_0
`qatzip-debuginfo` Red Hat:rhel_eus:9.0::appstream	before 0:1.1.2-1.el9_0	0:1.1.2-1.el9_0
`qatzip-debugsource` Red Hat:rhel_eus:9.0::appstream	before 0:1.1.2-1.el9_0	0:1.1.2-1.el9_0
`qatzip-libs` Red Hat:rhel_eus:9.0::appstream	before 0:1.1.2-1.el9_0	0:1.1.2-1.el9_0
`qatzip-libs-debuginfo` Red Hat:rhel_eus:9.0::appstream	before 0:1.1.2-1.el9_0	0:1.1.2-1.el9_0
`qatzip-debuginfo` Red Hat:rhel_eus:9.0::crb	before 0:1.1.2-1.el9_0	0:1.1.2-1.el9_0
`qatzip-debugsource` Red Hat:rhel_eus:9.0::crb	before 0:1.1.2-1.el9_0	0:1.1.2-1.el9_0
`qatzip-devel` Red Hat:rhel_eus:9.0::crb	before 0:1.1.2-1.el9_0	0:1.1.2-1.el9_0
`qatzip-libs-debuginfo` Red Hat:rhel_eus:9.0::crb	before 0:1.1.2-1.el9_0	0:1.1.2-1.el9_0
`qatzip` Red Hat:rhel_eus:8.6::appstream	before 0:1.1.2-1.el8_6	0:1.1.2-1.el8_6
`qatzip-debuginfo` Red Hat:rhel_eus:8.6::appstream	before 0:1.1.2-1.el8_6	0:1.1.2-1.el8_6
`qatzip-debugsource` Red Hat:rhel_eus:8.6::appstream	before 0:1.1.2-1.el8_6	0:1.1.2-1.el8_6
`qatzip-libs` Red Hat:rhel_eus:8.6::appstream	before 0:1.1.2-1.el8_6	0:1.1.2-1.el8_6
`qatzip-libs-debuginfo` Red Hat:rhel_eus:8.6::appstream	before 0:1.1.2-1.el8_6	0:1.1.2-1.el8_6
`qatzip-debuginfo` Red Hat:rhel_eus:8.6::crb	before 0:1.1.2-1.el8_6	0:1.1.2-1.el8_6
`qatzip-debugsource` Red Hat:rhel_eus:8.6::crb	before 0:1.1.2-1.el8_6	0:1.1.2-1.el8_6
`qatzip-devel` Red Hat:rhel_eus:8.6::crb	before 0:1.1.2-1.el8_6	0:1.1.2-1.el8_6
`qatzip-libs-debuginfo` Red Hat:rhel_eus:8.6::crb	before 0:1.1.2-1.el8_6	0:1.1.2-1.el8_6

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-36369 is a high vulnerability (CVSS 7.8) in Intel Qatzip, published November 8, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.25%, the 16th percentile. Fixed in qatzip 1.0.9-1.el8.

References

Show 15 moreShow less