CVE-2023-20774: 
NixOS vulnerability analysis and mitigation

CVE-2023-20774 is a security vulnerability discovered in the display component affecting MediaTek chipsets. The vulnerability was disclosed on July 3, 2023, and affects Android versions 12.0 and 13.0. The issue impacts various MediaTek chipset models including MT6789, MT6835, MT6855, MT6886, MT6895, MT6983, MT6985, MT8195, MT8673, and MT8781 (MediaTek Bulletin).

The vulnerability is classified as an out-of-bounds read vulnerability due to a missing bounds check in the display component. It has been assigned a CVSS v3.1 base score of 6.7 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. The vulnerability is tracked under CWE-125 (Out-of-bounds Read) (NVD).

If exploited, this vulnerability could lead to local escalation of privilege with System execution privileges needed. The vulnerability does not require user interaction for exploitation (MediaTek Bulletin).

The vulnerability requires local access and high privileges for exploitation. No user interaction is needed for exploitation, making it potentially attractive to attackers who already have system-level access to the device (NVD).

MediaTek has addressed this vulnerability and notified device OEMs of the security patches at least two months before the public disclosure. Users should ensure their devices are updated with the latest security patches provided by their device manufacturers (MediaTek Bulletin).