CVE-2019-25293

HighCVSS 7.8

Published: 06/02/2026(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

3th percentile - higher than 3% of all known CVEs

Summary

BlueStacks App Player version 2.4.44.62.57 contains an unquoted service path vulnerability in the BstHdLogRotatorSvc service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe to inject malicious executables and escalate privileges.

Risk Assessment

This vulnerability poses a risk to organizations as it allows local attackers to gain elevated privileges and execute malicious code on the system.

Recommendation

It is recommended to update BlueStacks App Player to the latest version to mitigate this vulnerability and to review and secure service paths in the system.

Other vulnerabilities in BlueStacks App Player 2.4.44.62.57

CVE-2016-4288High
A local privilege escalation vulnerability exists in BlueStacks App Player. The BlueStacks App Player installer creates a registry key with weak permissions that allows users to execute arbitrary programs with SYSTEM privileges.

Original NVD description (English source)

BlueStacks App Player 2.4.44.62.57 contains an unquoted service path vulnerability in the BstHdLogRotatorSvc service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe to inject malicious executables and escalate privileges.