CVE-2026-80114

Name of the Vulnerable Software and Affected Versions PassMark PerformanceTest versions prior to 11.1 build 1012 BurnInTest versions prior to 11.1 build 1000 OSForensics versions prior to 11.1 build 1016

Description The DirectIo64.sys driver contains hard-coded credentials. Local attackers can extract an 8-byte key embedded as a literal in the binary to compute valid MD5 authentication tags for arbitrary IOCTL write requests, enabling arbitrary physical memory writes. Furthermore, attackers can bypass secondary validation gates by using the driver's bit-clear IOCTL to modify a bit in the gating instruction's displacement byte. This action causes subsequent write requests to bypass MAC verification, size checks, and Vendor ID checks.

Recommendations Update PassMark PerformanceTest to version 11.1 build 1012 or later. Update BurnInTest to version 11.1 build 1000 or later. Update OSForensics to version 11.1 build 1016 or later.