AmdTools64.sys

AMD Special Tools Driver AmdTools64.sys versions 1.7.16.218 and 1.7.16.219 expose physical-memory mapping through IOCTL 0xFFF028A4. Static inspection of both samples shows caller-supplied physical addresses and lengths reaching MmMapIoSpace and user-mode MDL mappings without a physical-range authorization check. The device security descriptor restricts access to LocalSystem and Builtin Administrators. The PnP device interface must be installed and started before use. The 1.7.16.218 submission includes a screenshot of a SYSTEM shell reported from an isolated VM; that runtime result was not independently reproduced. No affected-version range is asserted.