The DirectIo64.sys driver in PassMark's PerformanceTest, BurnInTest and OSForensics contains a privilege escalation flaw. It exposes an IOCTL that accepts an arbitrary 64‑bit physical address and bit index without validating the address. A local attacker with a device handle can supply any physical address and invoke MmMapIoSpace to clear bits in kernel memory or page tables, effectively corrupting executable code or memory structures. This breach of kernel integrity can elevate privileges to SYSTEM, giving the attacker full control over the machine. The weakness corresponds to CWE‑782 and CWE‑787.

PassMark Software's PerformanceTest versions prior to build 11.1‑1012, BurnInTest versions prior to 11.1‑1000, and OSForensics versions prior to 11.1‑1016 are affected. The vulnerability resides in the DirectIo64.sys driver bundled with these applications and is limited to local platforms running those builds.

The CVSS score of 6.9 indicates moderate severity. No EPSS score is available, and the issue is not listed in the CISA KEV catalog. The attack requires local machine access and the ability to open the DirectIO device; no network exposure is necessary. Once exploited, the attacker can map physical memory, clear arbitrary bits, modify kernel code or page tables, and gain SYSTEM or root privileges, enabling full system compromise. The threat therefore presents a moderate but significant local privilege escalation risk.