CVE-2021-0429: 
NixOS vulnerability analysis and mitigation

In pollOnce of ALooper.cpp, there is a possible memory corruption vulnerability due to a use after free condition in Android versions 8.1, 9, 10, and 11. This vulnerability (CVE-2021-0429) was discovered and reported to Android security team, with the disclosure made in the April 2021 Android Security Bulletin (Android Bulletin).

The vulnerability exists in the pollOnce function within ALooper.cpp component of Android. It manifests as a potential memory corruption issue caused by a use-after-free condition. The vulnerability affects multiple versions of the Android operating system, including Android 8.1, 9, 10, and 11 (CVE Details).

If successfully exploited, this vulnerability could lead to local escalation of privilege on affected Android devices. The exploitation does not require additional execution privileges or user interaction, making it particularly concerning from a security perspective (CVE Details).

The vulnerability can be exploited locally without requiring any additional execution privileges. No user interaction is needed for exploitation, which makes it particularly accessible to potential attackers (CVE Details).

The vulnerability was addressed in the Android Security Bulletin of April 2021. Users should ensure their Android devices are updated with the latest security patches to mitigate this vulnerability (Android Bulletin).