CVE-2021-39790: 
NixOS vulnerability analysis and mitigation

In Dialer, there is a possible way to manipulate visual voicemail settings due to a missing permission check. This vulnerability (CVE-2021-39790) affects Android version 12L. The issue was discovered and reported by Android (associated with Google Inc. or Open Handset Alliance) (Android Advisory).

The vulnerability is classified as a local escalation of privilege issue with a CVSS v3.1 base score of 7.8 (HIGH). The vulnerability vector is CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating local access is required, low attack complexity, no privileges needed, and user interaction is required. The vulnerability is categorized under CWE-863 (Incorrect Authorization) (NVD Database).

If successfully exploited, this vulnerability could lead to local escalation of privilege with no additional execution privileges needed. The impact affects confidentiality, integrity, and availability of the system, all rated as High according to the CVSS scoring (NVD Database).

The vulnerability has been addressed in Android 12L. Users should update their Android devices to the latest available version that includes the security patch (Android Advisory).