CVE-2022-20095: 
NixOS vulnerability analysis and mitigation

In imgsensor, there is a possible out of bounds write vulnerability due to a missing bounds check. This vulnerability was assigned CVE-2022-20095 and was disclosed on May 3, 2022. The vulnerability affects MediaTek chipsets including MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6873, MT6885, MT6893, MT8788, and MT8797 running Android versions 11.0 and 12.0 (MediaTek Bulletin).

The vulnerability is classified as a medium severity issue with a CWE-20 (Improper Input Validation) classification. The vulnerability exists in the imgsensor component where a missing bounds check could lead to an out of bounds write condition. The vulnerability requires System execution privileges for exploitation (MediaTek Bulletin).

If exploited, this vulnerability could lead to local escalation of privilege with System execution privileges needed. The vulnerability does not require user interaction for exploitation (MediaTek Bulletin).

MediaTek has addressed this vulnerability and notified device OEMs of the security patches at least two months before publication. Users should ensure their devices are updated with the latest security patches provided by their device manufacturers (MediaTek Bulletin).