CVE-2022-32625: 
NixOS vulnerability analysis and mitigation

CVE-2022-32625 is a security vulnerability discovered in MediaTek's display component. The vulnerability was disclosed in December 2022 and affects various MediaTek chipsets running Android 11.0 and 12.0. The issue involves an improper input validation that could lead to an out-of-bounds write operation (Vendor Advisory).

The vulnerability is classified as an improper input validation issue (CWE-20) that could result in an out-of-bounds write due to an incorrect bounds check. It has been assigned a CVSS v3.1 Base Score of 6.7 (Medium), with the vector string CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (NVD).

The vulnerability could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation, making it a significant security concern for affected devices (Vendor Advisory).

The vulnerability affects multiple MediaTek chipsets including MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8168, MT8365, MT8675, MT8766, MT8781, and MT8791. MediaTek has released patches to address this vulnerability (Vendor Advisory).