CVE-2021-22492: 
NixOS vulnerability analysis and mitigation

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Broadcom Bluetooth chipsets) software. The Bluetooth UART driver has a buffer overflow. The Samsung ID is SVE-2020-18731 (January 2021). (CISA Bulletin)

The vulnerability affects Samsung mobile devices running Android versions 8.x, 9.0, and 10.0 that use Broadcom Bluetooth chipsets. The issue specifically involves a buffer overflow vulnerability in the Bluetooth UART driver. The vulnerability has been assigned a CVSS score of 5.8, indicating a medium severity level. (CISA Bulletin)

The vulnerability could allow attackers to cause memory corruption through the Bluetooth UART driver interface. This could potentially lead to device instability or unauthorized code execution. (Bleeping Computer)

The vulnerability requires local access to exploit the buffer overflow condition in the Bluetooth UART driver. According to reports, the initial patch could be bypassed with a UART interface overflow until a more recent patch was applied, which was implemented by Samsung in January 2021. (Bleeping Computer)

Samsung addressed this vulnerability through a security update released in January 2021. Users are advised to update their devices to the latest available firmware version that includes this security patch. (CISA Bulletin)