CVE-2020-27057: 
NixOS vulnerability analysis and mitigation

In Android 11, a vulnerability was identified in the GpuService.cpp file, specifically in the getGpuStatsGlobalInfo and getGpuStatsAppInfo functions. This vulnerability (CVE-2020-27057) was disclosed in December 2020 and affects Android systems running version 11 (Android Bulletin).

The vulnerability stems from a missing permission check in the GpuService.cpp file's getGpuStatsGlobalInfo and getGpuStatsAppInfo functions. The CVSS v3.1 base score is 3.3 (Low) with a vector string of CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. This indicates a local attack vector with low attack complexity, requiring low privileges, and no user interaction (NVD).

If exploited, this vulnerability could lead to local information disclosure of GPU statistics. The impact is limited to information disclosure with no effects on system integrity or availability (NVD).

The vulnerability requires local access and user execution privileges for exploitation. No user interaction is needed for exploitation, making it relatively straightforward to exploit if an attacker has the necessary local access (NVD).

The vulnerability was addressed in the Android Security Bulletin for December 2020. Users should update their Android devices to the latest available security patch level to mitigate this vulnerability (Android Bulletin).