CVE-2020-15481

CVE-2020-15481 affects PassMark BurnInTest v9.1 Build 1008, OSForensics v7.1 Build 1012, and PerformanceTest v10.0 Build 1008. The kernel drivers DirectIo32.sys and DirectIo64.sys expose IOCTL functionality that allows low-privilege users to map arbitrary physical memory into the calling process’...

CVE-2020-15479

The CVE-2020-15479 issue affects PassMark BurnInTest (up to v9.1), OSForensics (up to v7.1), and PerformanceTest (up to v10). The vulnerability stems from the driver's IOCTL request handler copying the input buffer onto the stack without validating its size, causing a buffer overflow. This can le...

CVE-2020-15480

CVE-2020-15480 affects PassMark BurnInTest (through 9.1), OSForensics (through 7.1), and PerformanceTest (through 10). The kernel driver exposes IOCTLs that allow low-privilege users to read and write arbitrary Model Specific Registers (MSRs), enabling arbitrary Ring-0 code execution and privileg...