CVE-2022-47450: 
NixOS vulnerability analysis and mitigation

In wlan driver, there is a possible missing permission check that could lead to local information disclosure. The vulnerability, identified as CVE-2022-47450, was discovered in 2022 and affects multiple Android versions (10.0, 11.0, 12.0) and various Unisoc chipsets including S8000, SC7731E, SC9832E, SC9863A, T310, and T606 (NVD).

The vulnerability has been assigned a CVSS v3.1 Base Score of 5.5 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. The vulnerability is classified under CWE-862 (Missing Authorization), indicating a fundamental security control issue in the authorization mechanism (NVD).

The vulnerability allows for local information disclosure, potentially exposing sensitive data to unauthorized users. The high confidentiality impact (C:H) in the CVSS score indicates that the vulnerability could lead to total information disclosure, with all system files being revealed (NVD).

The vulnerability has been addressed by Unisoc, and a security advisory has been published. Users are advised to update their devices with the latest security patches provided by their device manufacturers (Vendor Advisory).