CVE-2020-0405: 
NixOS vulnerability analysis and mitigation

CVE-2020-0405 is a vulnerability discovered in Android 11's NetworkStackNotifier component. The vulnerability was disclosed in September 2020 and affects Android version 11.0. It involves a possible permissions bypass due to an unsafe implicit PendingIntent (NVD).

The vulnerability is characterized by an unsafe implicit PendingIntent in the NetworkStackNotifier component. It has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The vulnerability is classified under CWE-281 (Improper Preservation of Permissions) (NVD).

If exploited, this vulnerability could lead to local escalation of privilege with User execution privileges. The vulnerability allows for high impacts on confidentiality, integrity, and availability of the affected system (NVD).

The vulnerability requires local access and user execution privileges for exploitation. Notably, user interaction is not needed for exploitation, making it more straightforward to exploit once the attacker has the required access (NVD).

The vulnerability has been addressed in Android 11 security updates. Users should ensure their devices are updated with the latest security patches (Android Bulletin).