CVE-2020-0350: 
NixOS vulnerability analysis and mitigation

CVE-2020-0350 is a vulnerability discovered in Android's NFC component that was disclosed in September 2020. The vulnerability is characterized by a possible out of bounds write condition due to a missing bounds check in the NFC implementation of Android 11 (NVD).

The vulnerability is classified as an out-of-bounds write (CWE-787) vulnerability. It has been assigned a CVSS v3.1 base score of 6.7 (Medium), with the following vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. The vulnerability requires local access and high privileges for exploitation, but does not require user interaction (NVD).

If successfully exploited, this vulnerability could lead to local escalation of privilege with System execution privileges. The attack requires firmware compromise for successful exploitation, potentially allowing an attacker to gain elevated system privileges (NVD).

The vulnerability requires local access and high privileges for exploitation. No user interaction is needed for exploitation, though firmware compromise is a prerequisite. The vulnerability has been assigned Android ID: A-139424089 (NVD).

The vulnerability was addressed in Android 11. Users should ensure their devices are updated to the latest available version that includes the security patch (NVD).