CVE-2025-52347

Published: May 1, 2026Modified: May 7, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue in the component DirectIo64.sys of PassMark BurnInTest v11.0 Build 1011, OSForensics v11.1 Build 1007, and PerformanceTest v11.1 Build 1004 allows attackers to access kernel memory and escalate privileges via a crafted IOCTL 0x8011E044 call.

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (4)

https://github.com/netero1010/Vulnerability-Disclosure/tree/main/CVE-2025-52347

Source: cve@mitre.org

https://www.osforensics.com/whats-new.html

Source: cve@mitre.org

https://www.passmark.com/products/burnintest/history.php

Source: cve@mitre.org

https://www.passmark.com/products/performancetest/history.php

Source: cve@mitre.org

Timeline

No history available yet.