CVE-2022-47332: 
NixOS vulnerability analysis and mitigation

In wlan driver, there is a possible missing permission check which could lead to local information disclosure. The vulnerability, identified as CVE-2022-47332, affects multiple Android versions (10.0, 11.0, 12.0) and various Unisoc chipsets including S8000, SC7731E, SC9832E, SC9863A, T310, and T606 (NVD).

The vulnerability has been assigned a CVSS v3.1 Base Score of 5.5 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. The vulnerability is classified as CWE-862 (Missing Authorization) according to the Common Weakness Enumeration system (NVD).

The vulnerability allows local attackers to access information without proper authorization. The impact is primarily focused on confidentiality, with high potential for information disclosure, while integrity and availability are not affected (NVD).

The vulnerability requires local access with low complexity and low privileges for exploitation. No user interaction is needed for the exploitation process (NVD).

Unisoc has released an advisory addressing this vulnerability. Users and administrators are advised to update their systems according to the vendor's recommendations (Vendor Advisory).