CVE-2022-20482: 
NixOS vulnerability analysis and mitigation

CVE-2022-20482 is a vulnerability discovered in Android's NotificationManager.java component, specifically in the createNotificationChannel function. The vulnerability affects Android versions 12, 12L, and 13. It was disclosed in the December 2022 Android security bulletin and assigned Android ID A-240422263 (Android Bulletin).

The vulnerability exists in the createNotificationChannel function of NotificationManager.java and can lead to resource exhaustion. It has been assigned a CVSS v3.1 base score of 5.5 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. The vulnerability is classified as CWE-400 (Uncontrolled Resource Consumption) (NVD).

If exploited, this vulnerability could make the device unusable and require a factory reset due to resource exhaustion. The impact is primarily focused on availability, with no direct impact on confidentiality or integrity (NVD).

The vulnerability requires local access with low privileges for exploitation. No user interaction is needed for exploitation, making it relatively straightforward to exploit once local access is obtained (NVD).

The vulnerability was addressed in the Android Security Bulletin for December 2022. Users should update their Android devices to the latest security patch level to mitigate this vulnerability (Android Bulletin).