Memu Play 7.1.3 contains an insecure folder permissions vulnerability that allows low-privileged users to modify the MemuService.exe executable. Attackers can r…

CVE-2020-37129 affects Memu Play 7.1.3, an Android emulator application. The vulnerability stems from insecure folder permissions that allow low-privileged users to modify the MemuService.exe executable file. Attackers can exploit this weakness by replacing the legitimate service executable with a malicious file. When the system restarts, the malicious executable runs with SYSTEM-level privileges, allowing complete system compromise. This represents a classic privilege escalation attack vector through improper file permissions. The vulnerability has been publicly documented with proof-of-concept exploits available.