CVE-2022-32630: 
NixOS vulnerability analysis and mitigation

In throttling, there is a possible out of bounds write due to an incorrect calculation of buffer size in MediaTek chipsets. This vulnerability (CVE-2022-32630) was discovered and disclosed in December 2022, affecting Android versions 12.0 and 13.0 running on MediaTek chipsets including MT6789, MT6855, MT6895, MT6983, and MT8781 (MediaTek Bulletin).

The vulnerability is classified as a Stack-based Buffer Overflow (CWE-121) that occurs in the throttling component. The issue stems from an incorrect calculation of buffer size that could lead to an out of bounds write operation. The vulnerability has been assigned a CVSS v3.1 base score of 6.7 (Medium severity), indicating moderate severity (NVD).

If exploited, this vulnerability could lead to local escalation of privilege with System execution privileges needed. The attacker would gain elevated system privileges on the affected device, though user interaction is not needed for exploitation (MediaTek Bulletin).

The vulnerability requires local access to exploit, as it cannot be triggered remotely. System execution privileges are needed to exploit this vulnerability, and no user interaction is required for exploitation. There are no public reports of this vulnerability being exploited in the wild (MediaTek Bulletin).

MediaTek has addressed this vulnerability by releasing security patches. Device manufacturers have been notified of the issue and corresponding security patches at least two months before public disclosure. Users should ensure their devices are updated with the latest security patches provided by their device manufacturers (MediaTek Bulletin).