CVE-2023-21303: 
NixOS vulnerability analysis and mitigation

In Content, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This vulnerability (CVE-2023-21303) affects Android operating system and could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation (NVD).

The vulnerability has been assigned a CVSS v3.1 Base Score of 5.5 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. The vulnerability is classified under CWE-203 (Observable Discrepancy) and affects Android versions up to (excluding) 14.0 (NVD).

The successful exploitation of this vulnerability could allow an attacker to obtain information about installed applications without having the necessary query permissions. This information disclosure vulnerability could potentially be used to gather intelligence about the target system for further attacks (NVD).

The vulnerability has a low attack complexity (AC:L) and requires local access (AV:L) with low privileges (PR:L). No user interaction (UI:N) is required for exploitation. The vulnerability affects the confidentiality of the system but does not impact integrity or availability (NVD).

The vulnerability has been addressed in Android 14.0. Users should update their Android devices to the latest available version to mitigate this vulnerability (Android Bulletin).