CVE-2021-0563: 
NixOS vulnerability analysis and mitigation

CVE-2021-0563 is a vulnerability discovered in Android 11's ih264e_fmt_conv_422i_to_420sp function within ih264e_fmt_conv.c. The vulnerability was disclosed in June 2021 and affects Android operating system. It involves a potential out-of-bounds read due to a heap buffer overflow condition (NVD).

The vulnerability is classified as an out-of-bounds read (CWE-125) vulnerability that occurs in the ih264e_fmt_conv_422i_to_420sp function of ih264e_fmt_conv.c. It has been assigned a CVSS v3.1 base score of 5.5 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating local access is required with low attack complexity (NVD).

If exploited, this vulnerability could lead to local information disclosure without requiring additional execution privileges. The vulnerability primarily affects the confidentiality of the system, with no direct impact on integrity or availability (NVD).

The vulnerability can be exploited locally and does not require user interaction for exploitation. An attacker would need local access and low-level privileges to exploit this vulnerability (NVD).

Google addressed this vulnerability in the Android security bulletin for June 2021. Users should apply the security updates provided through the Android security patch level 2021-06-01 (Android Bulletin).