CVE-2023-21476: 
NixOS vulnerability analysis and mitigation

Out-of-bounds Write vulnerability in libaudiosaplus_sec.so library prior to SMR Apr-2023 Release 1 allows local attacker to execute arbitrary code. The vulnerability was assigned CVE-2023-21476 and has a CVSS v3.1 Base Score of 7.8 (High) (AttackerKB).

The vulnerability is classified as an Out-of-bounds Write issue affecting the libaudiosaplus_sec.so library component. It has a CVSS Vector of CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating: Local attack vector, Low attack complexity, Low privileges required, No user interaction needed, Unchanged scope, and High impact on confidentiality, integrity and availability (AttackerKB).

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system. The vulnerability has High severity ratings for confidentiality, integrity and availability impacts, potentially giving complete access to the affected component (AttackerKB).

The vulnerability was patched in Samsung's SMR Apr-2023 Release 1. Users should update their devices to this or a later security patch level to mitigate the vulnerability (Samsung Mobile Security).