CVE-2022-47464: 
NixOS vulnerability analysis and mitigation

A vulnerability was discovered in telecom service affecting UNISOC devices, identified as CVE-2022-47464. The issue was disclosed and analyzed by the National Vulnerability Database (NVD) on April 11, 2023. The vulnerability stems from a missing permission check in the telecom service component (NVD).

The vulnerability has been classified with a CVSS v3.1 Base Score of 5.5 (Medium severity) with the following vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. The weakness is categorized as CWE-120 (Buffer Copy without Checking Size of Input). The vulnerability affects multiple versions of Google Android (10.0, 11.0, 12.0, 13.0) and various UNISOC chipsets including S8000, SC7731E, SC9832E, SC9863A, T310, and several others (NVD).

The vulnerability can lead to local denial of service in telecom service functionality. When exploited, it affects the availability of the telecom service component in affected devices (NVD).

UNISOC has released an advisory and patch for this vulnerability. Users and manufacturers using affected UNISOC chipsets should update their systems with the latest security patches (Vendor Advisory).