CVE-2021-39761: 
NixOS vulnerability analysis and mitigation

In Media, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This vulnerability (CVE-2021-39761) affects Android 12L. The issue could lead to local information disclosure with no additional execution privileges needed and requires no user interaction for exploitation (Android Bulletin).

The vulnerability has been assigned a CVSS v3.1 Base Score of 5.5 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. Under CVSS v2.0, it received a Base Score of 2.1 (LOW) with vector (AV:L/AC:L/Au:N/C:P/I:N/A:N). The vulnerability is classified under CWE-203 (Observable Discrepancy) (NVD).

The vulnerability allows an attacker to determine whether specific apps are installed on the device without having the necessary query permissions. This represents a privacy concern as it enables unauthorized access to information about installed applications through side channel information disclosure (Android Bulletin).

The vulnerability was addressed in Android 12L security updates. Users should ensure their devices are updated to the latest available security patch level to mitigate this vulnerability (Android Bulletin).