CVE-2022-21748: 
NixOS vulnerability analysis and mitigation

CVE-2022-21748 is a vulnerability in telephony systems that was discovered and disclosed in June 2022. The vulnerability affects various MediaTek chipsets running Android versions 11.0 and 12.0, including MT6580, MT6735, MT6737, MT6739, and several other models. This security issue is characterized as an improper access control vulnerability in telephony systems (MediaTek Bulletin).

The vulnerability is classified as a medium severity issue with improper access control in telephony systems. It stems from a missing permission check that could potentially lead to information disclosure. The vulnerability has been assigned CWE-284 (Improper Access Control) as its weakness enumeration (MediaTek Bulletin).

The vulnerability could lead to local information disclosure when exploited. The attack requires user execution privileges and user interaction for successful exploitation (MediaTek Bulletin).

MediaTek has notified device OEMs of this issue and corresponding security patches were made available at least two months before the public disclosure. Users should ensure their devices are updated with the latest security patches to mitigate this vulnerability (MediaTek Bulletin).