Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2019-25568

Memu Play 6.0.7 Privilege Escalation via Insecure File Permissions

Description

Memu Play 6.0.7 contains an insecure file permissions vulnerability that allows low-privilege users to escalate privileges by replacing the MemuService.exe executable. Attackers can rename and overwrite MemuService.exe in the installation directory with a malicious executable, which executes with system-level privileges when the service restarts after a computer reboot.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Memuplay Memu Play

  • 6.0.7affected

References