CVE-2022-47473: 
NixOS vulnerability analysis and mitigation

CVE-2022-47473 is a security vulnerability discovered in the telephony service that involves a missing permission check. The vulnerability was disclosed and assigned a CVSS v3.1 base score of 5.5 (MEDIUM). The affected systems include various UNISOC hardware platforms and Android versions 10.0 and 11.0 (NVD).

The vulnerability stems from a missing permission check in the telephony service component. This security flaw has been assigned a CVSS v3.1 vector string of CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating local access is required, low attack complexity, low privileges required, no user interaction needed, and the scope is unchanged. The vulnerability primarily affects confidentiality with high impact, while having no impact on integrity or availability (NVD).

If exploited, this vulnerability could lead to local information disclosure without requiring additional execution privileges. The high confidentiality impact suggests that sensitive information could be exposed to unauthorized parties (NVD).

The vulnerability has been addressed by UNISOC, and details about the fix are available in their security advisory (UNISOC Advisory).