Arbitrary Memory Write Vulnerability in PassMark PerformanceTest, BurnInTest, and OSForensics
CVE-2026-80114

8.5HIGH

Key Information:

Vendor

Passmark Software

Status
Performancetest
Burnintest
Osforensics
Vendor
CVE Published:
4 September 2026

Badges

👾 Exploit Exists

What is CVE-2026-80114?

A vulnerability exists in PassMark PerformanceTest, BurnInTest, and OSForensics where hard-coded credentials in DirectIo64.sys allow local attackers to manipulate physical memory. By exploiting an 8-byte key embedded within the binary, attackers can create valid MD5 authentication tags for arbitrary IOCTL write requests. They can further bypass crucial validation checks by manipulating the driver's bit-clear IOCTL, effectively disabling MAC verification, size checks, and Vendor ID checks, thus enabling unauthorized memory access.

Affected Version(s)

BurnInTest 0

OSForensics 0

PerformanceTest 0

References

https://github.com/floppywiggler/directio64-disclosure
technical-descriptionexploit
https://www.passmark.com/products/performancetest/history...
release-notespatch
https://www.passmark.com/products/burnintest/history.php
release-notespatch

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Emil Sørbrøden
.