CVE-2025-52347: Input Validation

Published May 1, 2026

Updated

An issue in the component DirectIo64.sys of PassMark BurnInTest v11.0 Build 1011, OSForensics v11.1 Build 1007, and PerformanceTest v11.1 Build 1004 allows attackers to access kernel memory and escalate privileges via a crafted IOCTL 0x8011E044 call.

Affected Software

3 affected components

PassMark BurnInTest=11.0 Build 1011

PassMark OSForensics=11.1 Build 1007

PassMark PerformanceTest=11.1 Build 1004

Event History

May 1, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·07:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The attacker needs local system access and low-level privileges. The CVSS vector indicates no user interaction is required.

Can this be exploited remotely?

The CVSS attack vector is local, so the provided data does not indicate remote exploitation. An attacker would need to execute a crafted IOCTL call on the affected system.

What is the likely impact of successful exploitation?

Successful exploitation can provide access to kernel memory and enable privilege escalation. The reported impact includes high confidentiality, integrity, and availability effects.

CVE-2025-52347: Input Validation

Affected Software

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

Can this be exploited remotely?

What is the likely impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

Can this be exploited remotely?

What is the likely impact of successful exploitation?