CVE-2021-0313: 
NixOS vulnerability analysis and mitigation

In the Android Framework component, specifically in the isWordBreakAfter function of LayoutUtils.cpp, a vulnerability (CVE-2021-0313) was discovered that affects Android versions 8.0, 8.1, 9, 10, and 11. This vulnerability was disclosed in Google's January 2021 Android security bulletin (Android Bulletin, Threatpost).

The vulnerability stems from improper input validation in the TextView component's isWordBreakAfter function. It has been assigned a CVSS v3.1 base score of 7.5 (High), with a vector string of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The vulnerability is classified under CWE-20 (Improper Input Validation) (NVD).

When exploited, this vulnerability can lead to remote denial of service by slowing down or crashing a TextView. The attack requires no additional execution privileges and can be executed remotely without user interaction (NVD).

The vulnerability can be exploited remotely and requires no user interaction or special privileges for exploitation. The attack vector is network-accessible, and the complexity of exploitation is considered low according to the CVSS metrics (NVD).

Google has released security patches for this vulnerability in the January 2021 security update. The fix has been implemented for all affected Android versions (8.0, 8.1, 9, 10, and 11). Users are advised to update their devices to the latest security patch level (Android Bulletin).