CVE-2020-27036: 
NixOS vulnerability analysis and mitigation

In phNxpNciHal_send_ext_cmd of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation (MITRE, NVD).

The vulnerability exists in the NFC component, specifically in the phNxpNciHal_send_ext_cmd function of phNxpNciHal_ext.cc file. The core issue is a missing bounds check that can result in an out-of-bounds write operation. This vulnerability affects Android versions including Android-11 (MITRE).

The vulnerability can lead to local escalation of privilege on affected systems. The attacker does not need additional execution privileges to exploit this vulnerability, and user interaction is not required for exploitation (MITRE).

The vulnerability can be exploited locally without requiring any additional execution privileges or user interaction. No known exploits in the wild have been reported at the time of disclosure (MITRE).

The vulnerability has been addressed in subsequent Android security updates. Users should ensure their devices are updated with the latest security patches to mitigate this vulnerability (NVD).