CVE-2021-0406: 
NixOS vulnerability analysis and mitigation

In cameraisp, there is a possible out of bounds write vulnerability due to a missing bounds check. This vulnerability affects Android versions 10 and 11, identified as CVE-2021-0406. The vulnerability was published on February 26, 2021, and was discovered by Le Wu (吴乐) of Baidu Security (NVD Results).

The vulnerability has been assessed with a CVSS v3.1 score of 6.7 (MEDIUM) and a CVSS v2.0 score of 7.2 (HIGH). The vulnerability requires System execution privileges for exploitation, and user interaction is not needed for exploitation. The issue was addressed with patch ID ALPS05471418 (NVD Results).

If successfully exploited, this vulnerability could lead to local escalation of privilege on affected Android devices. The attacker would need System execution privileges to exploit this vulnerability (NVD Results).

The vulnerability requires System execution privileges for successful exploitation. No user interaction is needed for exploitation, making it potentially more dangerous if an attacker gains the necessary system privileges (NVD Results).

The vulnerability has been addressed with patch ID ALPS05471418. Users should ensure their Android devices are updated to the latest available security patch level that includes this fix (NVD Results).