CVE-2019-25568 - Vulnerability Analysis

Overview

Memu Play 6.0.7 contains an insecure file permissions vulnerability caused by improper executable file permissions on MemuService.exe, letting low-privilege users escalate privileges by replacing the executable, exploit requires local user access.

Severity & Score

Impact

Low-privilege users can escalate to system-level privileges by replacing a service executable.

Mitigation

Update to the latest version with corrected file permissions.

References

• https://www.exploit-db.com/exploits/46437
• https://www.memuplay.com/
• https://www.memuplay.com/download-en.php?file_name=Memu-Setup&from=official_release
• https://www.vulncheck.com/advisories/memu-play-privilege-escalation-via-insecure-file-permissions

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner