CVE-2019-25568: Memu Play 6.0.7 Privilege Escalation via Insecure File Permissions

Published Mar 21, 2026
·
Updated

Memu Play 6.0.7 contains an insecure file permissions vulnerability that allows low-privilege users to escalate privileges by replacing the MemuService.exe executable. Attackers can rename and overwrite MemuService.exe in the installation directory with a malicious executable, which executes with system-level privileges when the service restarts after a computer reboot.

Affected Software

2 affected components
Microvirt MEMU Play=6.0.7
Microvirt MEmu<=6.0.7

Event History

Mar 21, 2026
CVE Published
via MITRE·12:47 PM
Data Sourced
via MITRE·12:47 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:16 PM
DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2019-25568?

CVE-2019-25568 is classified as a high-severity vulnerability due to the potential for privilege escalation.

2

How do I fix CVE-2019-25568?

To fix CVE-2019-25568, ensure that file permissions for MemuService.exe are properly restricted to prevent unauthorized modifications.

3

Who is affected by CVE-2019-25568?

CVE-2019-25568 affects users of Memu Play version 6.0.7 that have not applied necessary security measures.

4

What is the nature of the vulnerability in CVE-2019-25568?

CVE-2019-25568 involves insecure file permissions that allow low-privilege users to escalate their privileges.

5

What potential impact does CVE-2019-25568 have on users?

If exploited, CVE-2019-25568 can allow attackers to gain elevated privileges, potentially compromising the system's security.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203