CVE-2023-21114: 
NixOS vulnerability analysis and mitigation

CVE-2023-21114 is a security vulnerability affecting Android devices. The vulnerability was discovered in multiple locations where there is a possible permission bypass due to a confused deputy. This issue affects Android 13 operating system (Android Bulletin).

The vulnerability is classified as a local escalation of privilege (EoP) vulnerability with a CVSS v3.1 base score of 7.8 HIGH (Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The vulnerability requires no additional execution privileges and no user interaction for exploitation (NVD).

If exploited, this vulnerability could lead to local escalation of privilege, allowing an attacker to gain elevated access to system resources. The vulnerability affects the WiFi component of Android and could potentially compromise system security (Android Bulletin).

The vulnerability requires local access and low privileges for exploitation. No user interaction is needed for exploitation, making it relatively straightforward to exploit if an attacker has local access to the device (NVD).

The vulnerability has been patched in the June 2024 Android Security Bulletin. Users should update their devices to a security patch level of 2024-06-01 or later to address this issue. The fix has been implemented in the WiFi component through multiple patches (Android Bulletin).