CVE-2020-0478: 
NixOS vulnerability analysis and mitigation

CVE-2020-0478 is a security vulnerability discovered in the extend_frame_lowbd function of restoration.c within the Android operating system. The vulnerability was disclosed in December 2020 and affects Android 11. The issue stems from a missing bounds check that could potentially lead to an out-of-bounds write operation (NVD, Debian Tracker).

The vulnerability exists in the extend_frame_lowbd function of restoration.c, which is part of the AOM (Alliance for Open Media) codebase. The issue is characterized by a missing bounds check that could allow for an out-of-bounds write operation. The vulnerability requires user interaction for exploitation and does not need additional execution privileges (Debian Tracker).

If successfully exploited, this vulnerability could lead to local escalation of privilege on affected systems. The impact is considered minor, as indicated by its classification in various distributions (Debian Tracker).

The vulnerability requires user interaction for exploitation, with no additional execution privileges needed. This requirement somewhat limits the ease of exploitation (Debian Tracker).

The vulnerability has been addressed in several versions of the affected software. Fixed versions include bookworm (3.6.0-1+deb12u1) and later releases. The fix was also implemented in Android's security updates (Debian Tracker, Android Security).