CVE-2020-0306: 
NixOS vulnerability analysis and mitigation

CVE-2020-0306 is a vulnerability discovered in LLVM affecting Android 11. The vulnerability involves ineffective stack cookie placement due to stack frame double reservation. This security flaw was disclosed as part of the Android 11 security bulletin (Android Bulletin).

The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. This indicates that the vulnerability requires local access, low attack complexity, low privileges, and no user interaction, while potentially impacting confidentiality, integrity, and availability at high levels (NVD).

The vulnerability could lead to local escalation of privilege with no additional execution privileges needed. The successful exploitation of this vulnerability does not require user interaction, making it particularly concerning for system security (Android Bulletin).

The vulnerability requires local access to the system and low privileges for exploitation. No user interaction is needed for exploitation, which makes it easier to exploit once an attacker has local access to the system (NVD).

The vulnerability was addressed in Android 11. Users should ensure their devices are updated to the latest available version that includes the security patch (Android Bulletin).