CVE-2023-20634: 
NixOS vulnerability analysis and mitigation

CVE-2023-20634 is a vulnerability discovered in the widevine component affecting MediaTek chipsets. The vulnerability was disclosed in March 2023 and affects Android versions 11.0 and 12.0. The issue stems from improper input validation that could lead to an out-of-bounds write condition (MediaTek Bulletin).

The vulnerability is classified as a medium severity issue with a CVSS v3.1 base score of 6.7. It is categorized under CWE-20 (Improper Input Validation). The vulnerability requires system execution privileges for exploitation, and no user interaction is needed. The affected components include the widevine system in various MediaTek chipsets including MT6762, MT6765, MT6768, MT6769, MT6779, MT6781, MT6785, and several others (NVD).

If exploited, this vulnerability could lead to local escalation of privilege with System execution privileges. The vulnerability affects multiple MediaTek chipsets used in Android devices running versions 11.0 and 12.0 (MediaTek Bulletin).

MediaTek has released security patches for the affected devices. Device OEMs were notified of the issues and corresponding security patches at least two months before the public disclosure (MediaTek Bulletin).