CVE-2022-28794: 
NixOS vulnerability analysis and mitigation

CVE-2022-28794 is a sensitive information exposure vulnerability discovered in Samsung mobile devices that affects the low-battery dumpstate log prior to SMR Jun-2022 Release 1. The vulnerability allows local attackers to obtain SIM card information through unauthorized access (CVE Details, NVD).

The vulnerability exists in the dumpstate logging functionality that is triggered during low-battery conditions. When exploited, it exposes sensitive SIM card information in the system logs that should not be accessible to unauthorized users. The vulnerability was assigned on April 7, 2022, and affects Samsung mobile devices running firmware versions prior to the June 2022 Security Maintenance Release (Samsung Mobile).

The vulnerability allows local attackers to access sensitive SIM card information that should be protected. This information exposure could potentially lead to unauthorized access to cellular network services or user identification data stored on the SIM card (CVE Details).

Samsung addressed this vulnerability in their June 2022 Security Maintenance Release (SMR). Users should update their devices to the latest available firmware version that includes the June 2022 security patches or later (Samsung Mobile).