CVE-2020-0114: 
NixOS vulnerability analysis and mitigation

CVE-2020-0114 is a high-severity elevation-of-privilege (EoP) vulnerability discovered in Android 10's KeyguardSliceProvider.java component. The vulnerability was disclosed in the June 2020 Android Security Bulletin and stems from a PendingIntent error in the onCreateSliceProvider function. This security flaw affects Android 10 devices and was assigned Android ID A-147606347 (CVE Mitre, Android Bulletin).

The vulnerability exists in the onCreateSliceProvider function of KeyguardSliceProvider.java due to a PendingIntent error. This implementation flaw could allow a confused deputy scenario to occur, potentially enabling unauthorized privilege escalation. The vulnerability does not require any special execution privileges for exploitation (Threatpost).

The vulnerability could enable a local malicious application to bypass user interaction requirements and gain access to additional permissions. When successfully exploited, the attacker could perform actions with System UI privileges (Threatpost).

The vulnerability can be exploited by a local malicious application without requiring user interaction. No additional execution privileges are needed for exploitation, making it relatively straightforward for an attacker with local access to the device (CVE Mitre).

Google addressed this vulnerability in the June 2020 Android Security Update. Users are advised to update their Android devices to the latest available security patch level to protect against this vulnerability (Android Bulletin).