CVE-2020-0494: 
NixOS vulnerability analysis and mitigation

In ih264d_parse_ave of ih264d_sei.c, there is a possible out of bounds read due to a heap buffer overflow vulnerability identified as CVE-2020-0494. This vulnerability affects Android 11 systems and requires user interaction for exploitation (Android Bulletin).

The vulnerability exists in the ih264d_parse_ave function within ih264d_sei.c component. It manifests as a heap buffer overflow that could lead to an out of bounds read condition. The vulnerability has been assigned a CVSS v3.1 Base Score of 6.5 (MEDIUM) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N (NVD).

If successfully exploited, this vulnerability could lead to remote information disclosure. The attack requires no additional execution privileges, though user interaction is necessary for exploitation (NVD).

The vulnerability requires user interaction for successful exploitation. The attack vector is network-accessible with low attack complexity and requires no privileges, as indicated by the CVSS metrics (NVD).

The vulnerability was addressed in the Android Security Bulletin. Users should update their Android devices to the latest available security patch level to mitigate this vulnerability (Android Bulletin).