CVE-2026-80119
Received Received - Intake

Memory Dump Vulnerability in PassMark PerformanceTest

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: VulnCheck

Description
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an information disclosure vulnerability in DirectIo64.sys that allows unauthenticated local attackers to dump complete physical memory contents by supplying a caller-controlled file path to an exposed IOCTL. Attackers can issue a single IOCTL call to trigger the driver to iterate all physical memory ranges via MmGetPhysicalMemoryRanges and map each page through ZwMapViewOfSection on the PhysicalMemory section object, writing a full RAM image to an attacker-specified path in the SYSTEM context, bypassing user-mode ACLs and exposing LSASS working set, process memory, and cryptographic material from all running processes.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-05
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-80119
EUVD
EUVD-2026-71690

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
passmark performancetest to 11.1_build_1012 (exc)
passmark burnintest to 11.1_build_1000 (exc)
passmark osforensics to 11.1_build_1016 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-73 The product allows user input to control or influence paths or file names that are used in filesystem operations.
CWE-497 The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an information disclosure vulnerability in PassMark PerformanceTest, BurnInTest, and OSForensics before version 11.1. The flaw exists in the DirectIo64.sys driver, which allows unauthenticated local attackers to dump the complete physical memory contents of a system by sending a specially crafted IOCTL request with a controlled file path. The driver then maps all physical memory ranges and writes a full RAM image to the specified path, exposing sensitive data like LSASS memory, process data, and cryptographic material from all running processes.

Detection Guidance

This vulnerability can be detected by checking for the presence of vulnerable PassMark software versions (PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, or OSForensics before 11.1 build 1016) and inspecting for unexpected memory dumps or unusual IOCTL calls to DirectIo64.sys.

Impact Analysis

An attacker exploiting this vulnerability could gain access to sensitive information stored in memory, including passwords, encryption keys, and private data from other running processes. This could lead to further attacks like privilege escalation, data theft, or unauthorized system access. The vulnerability requires local access but can be triggered with a single IOCTL call, making it dangerous in shared or multi-user environments.

Compliance Impact

This vulnerability could lead to severe compliance violations under GDPR and HIPAA due to unauthorized access to sensitive personal or health data stored in memory. GDPR requires protection of personal data, while HIPAA mandates safeguards for protected health information. A breach exposing such data could result in legal penalties, fines, and reputational damage for organizations failing to secure systems against this flaw.

Mitigation Strategies

Immediately update PassMark PerformanceTest to version 11.1 build 1012 or later, BurnInTest to version 11.1 build 1000 or later, and OSForensics to version 11.1 build 1016 or later. Remove or disable the vulnerable DirectIo64.sys driver if possible.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80119. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart