CVE-2020-27052: 
NixOS vulnerability analysis and mitigation

CVE-2020-27052 affects Android 11 and involves a permissions bypass vulnerability in the getLockTaskLaunchMode of ActivityRecord.java. This vulnerability allows any app to start in Lock Task Mode, potentially leading to local escalation of privilege. The vulnerability was discovered and disclosed in December 2020, with Android ID: A-158833495 (NVD).

The vulnerability exists in the getLockTaskLaunchMode functionality of ActivityRecord.java component in Android 11. It has a CVSS v3.1 Base Score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The vulnerability requires local access but no user interaction for exploitation, and can be executed with low attack complexity (NVD).

If exploited, this vulnerability could lead to local escalation of privilege with no additional execution privileges needed. The impact affects confidentiality, integrity, and availability at a high level, as indicated by the CVSS scoring (NVD).

The vulnerability requires local access and low privileges for exploitation. No user interaction is needed for exploitation, making it relatively straightforward to exploit if an attacker has local access to the device (NVD).

Google addressed this vulnerability in the December 2020 security patch level for Pixel devices. Users should update their Android devices to the latest security patch level to mitigate this vulnerability (Pixel Update Bulletin).