If you stress test small address ranges around each failing address, does that selectively heat up the chip to which that address routes?

Then all you'd need is an infrared imager.