CVE-2021-40180: 
NixOS vulnerability analysis and mitigation

In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts functionality. This vulnerability was disclosed on July 26, 2022 and assigned identifier CVE-2021-40180 (NVD).

The vulnerability has been assigned a CVSS v3 Base Score of 7.5 (High severity). The attack vector is Network-based, requires no privileges or user interaction, and has an unchanged scope. The vulnerability primarily impacts confidentiality, with no impact on integrity or availability (AttackerKB).

The vulnerability allows unauthorized access to sensitive contact information from a user's address book. This represents a significant privacy breach as malicious mini programs could potentially harvest users' contact data without proper authorization (NVD).

The vulnerability can be exploited remotely through the network vector without requiring any privileges or user interaction. The attack complexity is rated as Low, indicating relatively straightforward exploitation (AttackerKB).