Description
Memu Play 6.0.7 contains an insecure file permissions vulnerability that allows low-privilege users to escalate privileges by replacing the MemuService.exe executable. Attackers can rename and overwrite MemuService.exe in the installation directory with a malicious executable, which executes with system-level privileges when the service restarts after a computer reboot.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Memuplay | Memu Play | 6.0.7 | — |
References
- ExploitDB-46437 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: Memu Play 6.0.7 Privilege Escalation via Insecure File Permissions third-party-advisory