CVE-2020-0490: 
NixOS vulnerability analysis and mitigation

CVE-2020-0490 is a vulnerability discovered in Android 11's floor1.c component, specifically in the floor1_info_unpack function. The vulnerability was disclosed in December 2020 and affects Android 11 operating systems. The issue stems from a missing bounds check that could potentially lead to an out-of-bounds read condition (Android Bulletin).

The vulnerability is classified as an out-of-bounds read (CWE-125) due to a missing bounds check in the floor1_info_unpack function of floor1.c. The CVSS v3.1 base score is 6.5 (Medium), with a vector string of CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N. This indicates that the vulnerability is network-accessible, requires low attack complexity, needs no privileges, but does require user interaction (NVD).

If successfully exploited, this vulnerability could lead to remote information disclosure. The impact is limited to data confidentiality, with no direct impact on system integrity or availability. The high confidentiality impact (C:H) in the CVSS score indicates that sensitive information could be exposed (NVD).

The vulnerability requires user interaction for exploitation, and no additional execution privileges are needed. The attack vector is network-based (AV:N), indicating that the vulnerability can be exploited remotely (NVD).

The vulnerability was addressed in the Android Security Bulletin of December 2020. Users should update their Android 11 devices to the latest security patch level to mitigate this vulnerability (Android Bulletin).