Dynabook Security Advisory – Generic IO & Memory Access Driver (QIOMEM.SYS)

Overview

Dynabook has identified a security vulnerability in a legacy driver component, Generic IO & Memory Access Driver (QIOMEM.SYS), which was provided with certain older Toshiba systems.

This driver was included as part of the Password Utility, which enables BIOS password configuration from within Windows.

This issue applies specifically to certain systems released between 2009 and 2016.

Affected Systems

This issue may affect older Toshiba platforms (approximately Windows 7, Windows 8, Windows 8.1, and early Windows 10 systems) that include the Password Utility and associated driver component.

A list of affected systems is provided at the bottom of this notification.

Vulnerability Details

The identified issue may allow a locally executed program to interact improperly with the system via the driver.

• The vulnerability requires local access or execution of a malicious application
• It is not exploitable remotely over a network
• Under normal conditions, the likelihood of exploitation is considered low
• Overall impact is considered limited

Potential Impact

If a malicious application is already present on the system, the driver could potentially be misused to:

• Access sensitive system information
• Perform unauthorized operations
• Modify system behavior or data

Recommended Action

• Remove the affected driver (QIOMEM.SYS)

  • Customers should uninstall the driver using the following method:

• Option 1 – Automated Removal (Recommended)

  • Use the removal tool: ​Direct Link: QiomemDelTool_EN-2026-000093-001v3.zip
  • Follow the on-screen instructions to complete the process

Important Notes

• After removal, the Windows-based Password Utility will no longer function
• BIOS passwords can still be configured directly through the BIOS Setup Utility

Customer Guidance

To maintain system security:

• Do not run untrusted applications
• Keep operating systems and security software up to date
• Follow guidance to remove the affected driver, where applicable

Support

For further assistance, please contact your Dynabook support representative or visit the official Dynabook support website.

Toshiba Affected System List

Disclaimer

The information in this advisory is provided for the purpose of assisting customers in identifying and addressing the described issue. Dynabook may update this advisory as additional information becomes available. The information is provided “as is” without warranty of any kind.