CVE-2020-0211: 
NixOS vulnerability analysis and mitigation

In SumCompoundHorizontalTaps of convolve_neon.cc, there is a possible out of bounds read vulnerability (CVE-2020-0211) affecting Android 10. The vulnerability was discovered and disclosed to Android security team, with the fix being released in the June 2020 security bulletin (Android Bulletin).

The vulnerability exists in the SumCompoundHorizontalTaps function within convolve_neon.cc due to a missing bounds check, which could lead to an out of bounds read condition. The vulnerability affects Android 10 systems and has been assigned Android ID A-147491773.

If successfully exploited, this vulnerability could lead to remote information disclosure. The scope of the information disclosure is limited by the privileges of the compromised process.

The vulnerability requires user interaction for successful exploitation. No additional execution privileges are needed beyond those normally available to the exploiting process.

The vulnerability has been patched in the Android June 2020 security update. Users should update their Android devices to the latest available security patch level to protect against this vulnerability (Android Bulletin).