CVE-2021-0332: 
NixOS vulnerability analysis and mitigation

CVE-2021-0332 is a memory corruption vulnerability discovered in the bootFinished function of SurfaceFlinger.cpp component of Android operating system. The vulnerability was disclosed in February 2021 and affects Android versions 10 and 11. This use-after-free bug could potentially lead to local privilege escalation when exploited (NVD).

The vulnerability exists in the bootFinished function of SurfaceFlinger.cpp where a use-after-free condition could lead to memory corruption. The bug requires user execution privileges for exploitation, though no user interaction is needed for the exploit to be successful. The vulnerability affects Android versions 10 and 11 and is tracked internally as Android ID: A-169256435 (MITRE CVE).

If successfully exploited, this vulnerability could lead to local privilege escalation on affected Android devices. The attacker would need user execution privileges to exploit the vulnerability, though no direct user interaction is required for the exploitation process (Threatpost).

The vulnerability requires user execution privileges for successful exploitation, though no user interaction is needed. There are no reports of this vulnerability being actively exploited in the wild at the time of disclosure (Threatpost).

Google addressed this vulnerability in the February 2021 Android Security Bulletin. The fix was distributed through over-the-air updates to affected Android devices, with Google Pixel devices receiving the updates first, followed by other Android device manufacturers (Threatpost).