CVE-2022-20301: 
NixOS vulnerability analysis and mitigation

CVE-2022-20301 affects Android 13 and involves a vulnerability in Content service where there is a possible way to check if an account exists on the device due to a missing permission check (NVD). The vulnerability was disclosed on August 12, 2022, and affects Android's content management system.

The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. The vulnerability is classified under CWE-862 (Missing Authorization) and requires User execution privileges for exploitation. No user interaction is needed for the exploit to be successful (NVD).

This vulnerability could lead to local information disclosure if successfully exploited. An attacker with user execution privileges could potentially check for the existence of accounts on the device, potentially compromising user privacy (NVD).

The vulnerability requires local access and user execution privileges for exploitation. No user interaction is needed for exploitation, making it relatively straightforward to exploit if the attacker has the required access level (NVD).

The vulnerability affects Android 13, and users should ensure they have applied the latest security updates provided by Google through their Android security bulletins (Android Bulletin).