CVE-2022-20075: 
NixOS vulnerability analysis and mitigation

CVE-2022-20075 is a medium severity vulnerability discovered in the ged component affecting MediaTek chipsets. The vulnerability was disclosed in April 2022 and affects Android versions 10.0, 11.0, and 12.0. The issue involves an integer overflow vulnerability that could lead to an out-of-bounds write condition (MediaTek Bulletin).

The vulnerability is classified as an Integer Overflow or Wraparound (CWE-190) that occurs in the ged component. The technical issue stems from an integer overflow condition that could potentially result in an out-of-bounds write operation. The vulnerability has been assigned a medium severity rating (MediaTek Bulletin).

If exploited, this vulnerability could lead to local escalation of privilege with System execution privileges. The attack requires no user interaction for exploitation, making it particularly concerning from a security perspective (MediaTek Bulletin).

MediaTek has notified device OEMs of this issue and provided corresponding security patches. The vulnerability affects multiple MediaTek chipsets across various device types including smartphones and tablets. Users should ensure their devices are updated with the latest security patches provided by their device manufacturers (MediaTek Bulletin).