CVE-2019-14514

Summary of impact and details: CVE-2019-14514 affects Microvirt MEmu before 7.0.2. A guest Android OS inside MEmu runs a /system/bin/systemd binary with root privileges at startup. This binary opens TCP port 21509 and, when it receives input beginning with installer:uninstall, concatenates the re...

CVE-2018-20621

The CVE-2018-20621 issue affects Microvirt MEmu 6.0.6, specifically the MemuService.exe service binary. The root cause is insecure permissions set at install time, enabling binary planting that allows local privilege escalation. Successful exploitation yields code execution as NT AUTHORITY/SYSTEM...

CVE-2019-25568

Memu Play 6.0.7 contains an insecure file-permissions vulnerability that enables privilege escalation by replacing MemuService.exe in the installation directory with a malicious executable. An attacker can rename/overwrite MemuService.exe, causing the service to run at system level upon reboot. T...