CVE-2020-27048: 
NixOS vulnerability analysis and mitigation

CVE-2020-27048 is a vulnerability discovered in Android 11 affecting RW_SendRawFrame functionality in rw_main.cc. The vulnerability was disclosed and patched in December 2020. The issue involves a possible out of bounds write due to a missing bounds check in the code (NVD).

The vulnerability exists in the RW_SendRawFrame function of rw_main.cc where a missing bounds check could lead to an out of bounds write condition. The vulnerability has been assigned a CVSS v3.1 Base Score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (NVD).

If exploited, this vulnerability could lead to local escalation of privilege on affected Android devices. The impact is considered high as it could allow an attacker to gain elevated privileges without requiring additional execution privileges (NVD).

The vulnerability requires user interaction for exploitation and can be exploited locally without requiring additional execution privileges. No additional execution privileges are needed for exploitation (NVD).

Google addressed this vulnerability in the Android Security Bulletin for December 2020. Users should update their Android devices to the latest available security patch level to mitigate this vulnerability (Android Bulletin).