CVE-2020-0304: 
NixOS vulnerability analysis and mitigation

In Android 11, a vulnerability (CVE-2020-0304) was discovered in the Settings component that could lead to a potential permission bypass due to an unsafe PendingIntent. This security flaw was identified and documented in the Android Security Bulletin (Android Bulletin).

The vulnerability has been assigned a CVSS v3.1 Base Score of 5.5 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. The vulnerability requires local access and low privileges for exploitation, with no user interaction needed. The impact primarily affects confidentiality, with potential for high information disclosure (NVD CVE).

If exploited, this vulnerability could lead to local information disclosure with User execution privileges. The attack requires local access to the device but does not need user interaction for exploitation (NVD CVE).

The vulnerability requires local access to the device and low privileges for exploitation. No user interaction is needed for exploitation, making it relatively straightforward to exploit if an attacker has local access to the device (NVD CVE).

The vulnerability has been addressed in Android 11's security updates. Users should ensure their devices are updated to the latest available security patch level (Android Bulletin).