CVE-2020-35549: 
NixOS vulnerability analysis and mitigation

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Any application may establish itself as the default dialer, without user interaction. The Samsung ID is SVE-2020-19172 (December 2020) (NVD).

The vulnerability has been assigned a CVSS v3.1 Base Score of 5.5 MEDIUM with vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N. The vulnerability requires local access and low privileges to exploit, with no user interaction needed. The scope is unchanged, and while there is no impact on confidentiality, there is a high impact on integrity and no impact on availability (NVD).

The vulnerability allows any application to set itself as the default dialer application without user consent. This could potentially allow malicious applications to intercept or manipulate phone calls and related functionality (NVD).

The vulnerability is considered easily exploitable requiring only local access and low privileges. No user interaction is needed for exploitation, making it a significant security concern for affected devices (NVD).

Samsung has released security patches to address this vulnerability. Users of affected devices (running Android 8.x, 9.0, or 10.0) should ensure their devices are updated with the latest security patches (Samsung Mobile Security).