PassMark BurnInTest/OSForensics/PerformanceTest IOCTL DirectIo64.sys MmMapIoSpace physical_address privileges management

Summaryinfo

A vulnerability identified as problematic has been detected in PassMark BurnInTest, OSForensics and PerformanceTest. This vulnerability affects the function MmMapIoSpace of the file DirectIo64.sys of the component IOCTL Handler. The manipulation of the argument physical_address leads to privileges management. This vulnerability is traded as CVE-2026-80113. An attack has to be approached locally. There is no exploit available.

Detailsinfo

A vulnerability was found in PassMark BurnInTest, OSForensics and PerformanceTest (affected version not known). It has been rated as problematic. This issue affects the function MmMapIoSpace of the file DirectIo64.sys of the component IOCTL Handler. The manipulation of the argument physical_address with an unknown input leads to a privileges management vulnerability. Using CWE to declare the problem leads to CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. Impacted is integrity, and availability. The summary by CVE is:

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulnerability in DirectIo64.sys that allows local users to clear arbitrary bits at any physical memory address due to missing validation of the physical address parameter in an exposed IOCTL handler. Attackers can obtain a device handle and supply an arbitrary 64-bit physical address with a bit index to invoke MmMapIoSpace and clear bits in kernel code pages or page table entries, enabling local privilege escalation or system compromise.

The advisory is shared at github.com. The identification of this vulnerability is CVE-2026-80113 since 08/25/2026. The exploitation is known to be easy. An attack has to be approached locally. Technical details are known, but no exploit is available. MITRE ATT&CK project uses the attack technique T1068 for this issue.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• PassMark

Name

• BurnInTest
• OSForensics
• PerformanceTest

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion