CVE-2022-27821: 
NixOS vulnerability analysis and mitigation

Improper boundary check in Quram Agif library prior to SMR Apr-2022 Release 1 allows attackers to cause denial of service via crafted image file (NVD, Samsung Mobile). The vulnerability was discovered and disclosed in April 2022, affecting Android versions 10.0, 11.0, and 12.0.

The vulnerability has been assigned a CVSS v3.1 base score of 5.5 MEDIUM (Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) by NVD, while Samsung Mobile assigned it a score of 4.0 MEDIUM (Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). The vulnerability is classified as CWE-125 (Out-of-bounds Read) (NVD).

The vulnerability can lead to denial of service when processing crafted image files. The impact is primarily on system availability, with no direct impact on confidentiality or integrity (NVD).

The vulnerability requires local access and user interaction to exploit. An attacker would need to craft a specific image file to trigger the boundary check issue (NVD).

The vulnerability was addressed in the Samsung Mobile Security Maintenance Release (SMR) Apr-2022 Release 1. Users should update their devices to this version or later to mitigate the vulnerability (Samsung Mobile).