CVE-2020-0412: 
NixOS vulnerability analysis and mitigation

In Android's ActivityManagerService.java, a vulnerability was identified in the setProcessMemoryTrimLevel function due to a missing permission check. The vulnerability, tracked as CVE-2020-0412, affects multiple Android versions including Android 8.0, 8.1, 9, 10, and 11. This security flaw was discovered and reported to Google with Android ID A-160390416 (CVE Details).

The vulnerability is classified as an information disclosure flaw that exists in the Android System component. The issue stems from a missing permission check in the setProcessMemoryTrimLevel function within ActivityManagerService.java. The vulnerability requires no additional execution privileges for exploitation and can be exploited without user interaction (Android Bulletin).

The vulnerability could lead to local information disclosure of foreground processes. This means an attacker could potentially access sensitive information about currently running applications without requiring elevated privileges (Threatpost).

The vulnerability can be exploited locally without requiring additional execution privileges or user interaction. No evidence of active exploitation in the wild was reported at the time of disclosure (CVE Details).

Google addressed this vulnerability as part of its October 2020 security update for Android. The fix was rolled out to affected Android versions 8.0, 8.1, 9, 10, and 11. Users are advised to update their devices to the latest available security patch (Android Bulletin).

The vulnerability was disclosed as part of Google's October 2020 security update, which addressed a total of 50 security flaws. The update included patches for various high-severity vulnerabilities across different Android components (Threatpost).