CVE-2021-0641: 
NixOS vulnerability analysis and mitigation

In the Android operating system, CVE-2021-0641 is a vulnerability discovered in the getAvailableSubscriptionInfoList of SubscriptionController.java component. The vulnerability affects multiple Android versions including Android 8.1, 9, 10, and 11. This security issue was disclosed in the August 2021 Android Security Bulletin (Android Bulletin).

The vulnerability stems from a missing permission check in the getAvailableSubscriptionInfoList function within SubscriptionController.java. This security flaw could potentially expose unique identifiers due to inadequate access control mechanisms. The issue is tracked internally as Android ID: A-185235454 (CVE Mitre).

The vulnerability can lead to local information disclosure, potentially exposing sensitive unique identifiers to unauthorized parties. The exploitation does not require additional execution privileges or user interaction (CVE Mitre).

The vulnerability was addressed in the August 2021 Android Security Bulletin. Users should ensure their Android devices are updated with the latest security patches provided by their device manufacturers (Android Bulletin).