CVE-2023-20967: 
NixOS vulnerability analysis and mitigation

In avdtscbhdlpktnofrag of avdtscb_act.cc, there is a possible out of bounds write due to an incorrect bounds check. This vulnerability (CVE-2023-20967) affects Android versions 11, 12, 12L, and 13. The vulnerability was discovered and reported as Android ID: A-225879503 (Android Security Bulletin).

The vulnerability is classified as an Out-of-bounds Write (CWE-787) with a CVSS v3.1 base score of 7.8 (HIGH). The attack vector is Local (AV:L), with Low attack complexity (AC:L), requiring Low privileges (PR:L), and no user interaction (UI:N). The scope is Unchanged (S:U), with High impact on confidentiality (C:H), integrity (I:H), and availability (A:H) (NVD Database).

A successful exploitation of this vulnerability could lead to local escalation of privilege with no additional execution privileges needed. The vulnerability does not require user interaction for exploitation and could potentially allow an attacker to gain elevated access to system resources (Android Security Bulletin).

The vulnerability was addressed in the Android Security Bulletin for April 2023. Users should update their Android devices to the latest available security patch level to mitigate this vulnerability (Android Security Bulletin).