CVE-2022-24929: 
NixOS vulnerability analysis and mitigation

Unprotected Activity in AppLock prior to SMR Mar-2022 Release 1 allows attacker to change the list of locked app without authentication. The vulnerability, identified as CVE-2022-24929, was discovered and disclosed in early 2022, affecting Samsung mobile devices running Android versions 10.0, 11.0, and 12.0 (NVD).

The vulnerability has been assigned a CVSS v3 Base Score of 3.3 (Low severity). The attack vector is Local, with Low attack complexity and Low privileges required. The vulnerability requires no user interaction and has an Unchanged scope. The impact primarily affects integrity with a Low rating, while there are no impacts on confidentiality or availability (AttackerKB).

The vulnerability allows an attacker to modify the list of locked applications in AppLock without proper authentication. This could potentially compromise the security of protected applications and their data (MITRE).

Samsung addressed this vulnerability in the SMR Mar-2022 Release 1 security update. Users should update their devices to this version or later to protect against this vulnerability (Samsung Mobile).