CVE-2020-0161: 
NixOS vulnerability analysis and mitigation

CVE-2020-0161 is a vulnerability discovered in Android 10's MPEG4Extractor.cpp component, specifically in the parseChunk function. The vulnerability was disclosed in June 2020 and affects Android 10 operating systems. This security issue was assigned Android ID A-127973550 (NVD).

The vulnerability exists in the parseChunk function of MPEG4Extractor.cpp and involves improper input validation that could lead to resource exhaustion. The severity of this vulnerability has been assessed with a CVSS 3.1 Base Score of 6.5 (Medium), with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. The vulnerability has been classified under CWE-20 (Improper Input Validation) (NVD).

If successfully exploited, this vulnerability could lead to remote denial of service on affected Android devices. The attack requires no additional execution privileges, though user interaction is necessary for exploitation (NVD).

The vulnerability requires user interaction for successful exploitation. While the attack complexity is considered low, the attack vector is network-based, and no special privileges are required for exploitation (NVD).

Google addressed this vulnerability in the Android Security Bulletin for June 2020. Users should update their Android devices to the latest available security patch level to protect against this vulnerability (Android Security Bulletin).