CVE-2023-20611: 
NixOS vulnerability analysis and mitigation

CVE-2023-20611 is a vulnerability discovered in the GPU component of MediaTek chipsets. The vulnerability was disclosed on February 6, 2023, and affects various MediaTek chipset models running Android 12.0 and 13.0. This security issue is classified as a race condition leading to a use-after-free vulnerability (MediaTek Bulletin).

The vulnerability is categorized as a race condition in the GPU component that could result in a use-after-free condition. It has been assigned a CVSS v3.1 base score of 6.4 (Medium) with the vector string CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H. The weakness is classified under CWE-662 (Improper Synchronization) (NVD).

The vulnerability could lead to local escalation of privilege with System execution privileges needed. No user interaction is required for exploitation, making it a significant security concern for affected devices (MediaTek Bulletin).

The vulnerability affects multiple MediaTek chipsets including MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, and several others when running Android 12.0 or 13.0. MediaTek has notified device OEMs of the issue and provided corresponding security patches (MediaTek Bulletin).