CVE-2022-20067: 
NixOS vulnerability analysis and mitigation

The CVE-2022-20067 is a medium severity vulnerability identified in MediaTek's mdp component. The vulnerability was disclosed in April 2022 and affects various MediaTek chipsets across multiple Android versions. It involves improper input validation that could potentially lead to an out-of-bounds write condition (MediaTek Bulletin).

The vulnerability is classified as an improper input validation issue (CWE-20) in the mdp component. The technical root cause stems from a missing bounds check that could potentially lead to an out-of-bounds write condition. The vulnerability has been assigned a medium severity rating, requiring System execution privileges for exploitation (MediaTek Bulletin).

The vulnerability could lead to local escalation of privilege if successfully exploited. The attack requires System execution privileges, and no user interaction is needed for exploitation (MediaTek Bulletin).

The vulnerability affects Android versions 9.0, 10.0, 11.0, and 12.0 across multiple MediaTek chipsets including MT6731, MT6735, MT6739, and many others. MediaTek has notified device OEMs of the issue and corresponding security patches at least two months before publication (MediaTek Bulletin).