CVE-2023-20756: 
NixOS vulnerability analysis and mitigation

CVE-2023-20756 is a medium severity vulnerability affecting MediaTek chipsets. The vulnerability was discovered in keyinstall functionality and was disclosed in July 2023. It affects various MediaTek chipsets used in smartphones, tablets, and other devices running Android 12.0 and 13.0 operating systems (MediaTek Bulletin).

The vulnerability is classified as an integer overflow or wraparound vulnerability (CWE-190) in the keyinstall component. This could lead to an out-of-bounds write condition. The vulnerability has been assigned a CVSS v3.1 base score of 6.7 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (NVD).

If exploited, this vulnerability could lead to local escalation of privilege with System execution privileges. The attack requires no user interaction for exploitation, though system execution privileges are needed (MediaTek Bulletin).

MediaTek has released security patches for the affected devices. Device OEMs were notified of the issues and corresponding security patches at least two months before the public disclosure. Users are advised to update their devices with the latest security patches provided by their device manufacturers (MediaTek Bulletin).