CVE-2023-20775: 
NixOS vulnerability analysis and mitigation

CVE-2023-20775 is a medium severity vulnerability discovered in MediaTek's display component. The vulnerability was disclosed in July 2023 and affects various MediaTek chipsets running Android 12.0, 13.0, OpenWrt 21.02, and RDKB 2022Q3. The issue is identified as a buffer overflow vulnerability due to a missing bounds check in the display component (Vendor Advisory).

The vulnerability is classified as an out-of-bounds write vulnerability (CWE-787) due to a missing bounds check in the display component. It has been assigned a CVSS v3.1 base score of 6.7 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating local access, low attack complexity, high privileges required, and no user interaction needed for exploitation (NVD).

If exploited, this vulnerability could lead to local escalation of privilege with System execution privileges. The vulnerability requires no user interaction for exploitation but does need system-level privileges to be exploited (Vendor Advisory).

MediaTek has addressed this vulnerability with patch ID: ALPS07978760 and Issue ID: ALPS07363410. The fix has been distributed to device OEMs, who were notified of the issues and corresponding security patches at least two months before publication (Vendor Advisory).