CVE-2021-0473: 
NixOS vulnerability analysis and mitigation

CVE-2021-0473 is a critical security vulnerability discovered in the Android operating system affecting versions 8.1, 9, 10, and 11. The vulnerability exists in the rw_t3t_process_error function of rw_t3t.cc, where a possible double free condition can occur due to uninitialized data (NVD, SecurityWeek).

The vulnerability is rated as critical with a CVSS v3.1 base score of 8.8 (HIGH). The vulnerability vector is CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating that it can be exploited through adjacent network access, requires low attack complexity, needs no privileges or user interaction, and can result in high impacts to confidentiality, integrity, and availability (NVD).

If exploited, this vulnerability could lead to remote code execution over NFC with no additional execution privileges needed. The attacker could execute arbitrary code within the context of a privileged process, potentially gaining significant control over the affected device (NVD, SecurityWeek).

The vulnerability can be exploited remotely through NFC without requiring user interaction. The attack complexity is considered low, making it relatively straightforward for attackers to exploit once they have adjacent network access to the target device (NVD).

Google addressed this vulnerability in the Android Security Bulletin for May 2021. Users should update their Android devices to a security patch level of 2021-05-01 or later to receive the fix (SecurityWeek).