CVE-2020-0475: 
NixOS vulnerability analysis and mitigation

CVE-2020-0475 is a vulnerability discovered in Android 11's WindowManagerService.java component, specifically in the createInputConsumer function. The vulnerability was disclosed in December 2020 and affects Android 11 systems. The issue stems from a missing permission check that could potentially allow input events to be blocked and intercepted (Android Bulletin).

The vulnerability exists in the createInputConsumer function of WindowManagerService.java due to a missing permission check. It has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability is classified under CWE-862 (Missing Authorization) (NVD).

If exploited, this vulnerability could lead to local escalation of privilege on affected Android devices. The impact includes potential unauthorized access to block and intercept input events, with high potential impact on confidentiality, integrity, and availability of the system (NVD).

The vulnerability requires local access and user interaction for exploitation. No additional execution privileges are needed for exploitation. The attack complexity is considered low, but user interaction is required as a prerequisite for successful exploitation (NVD).

The vulnerability was addressed in the Android Security Bulletin for December 2020. Users should update their Android devices to the latest available security patch level to mitigate this vulnerability (Android Bulletin).