CVE-2020-0390: 
NixOS vulnerability analysis and mitigation

CVE-2020-0390 is a high-severity vulnerability discovered in the Android Framework that could lead to local information disclosure. The vulnerability affects Android versions 10 and 11, specifically in the app zygote SE Policy. This security flaw was identified and reported to Google, with no additional execution privileges needed for exploitation (Android Bulletin).

The vulnerability exists in the Android Framework component and specifically affects the app zygote SE Policy implementation. The flaw could be exploited without requiring additional execution privileges, and user interaction is not needed for exploitation. The vulnerability was tracked under Android ID: A-157598026 (CVE Mitre).

If successfully exploited, this vulnerability could lead to local information disclosure on affected Android devices. The impact is limited to information disclosure with no additional execution privileges required (Threatpost).

The vulnerability can be exploited locally without requiring user interaction or additional execution privileges. No known exploits in the wild have been reported at the time of disclosure (Android Bulletin).

Google addressed this vulnerability as part of its September 2020 Android security updates. Users are advised to update their Android devices to the latest available security patch level to protect against this vulnerability (Android Bulletin).