CVE-2023-32860: 
NixOS vulnerability analysis and mitigation

In display, there is a possible classic buffer overflow vulnerability (CVE-2023-32860) that was discovered and disclosed in December 2023. The vulnerability affects MediaTek chipsets running Android 12.0 and 13.0, including various models such as MT6761, MT6765, MT6768, and others (MediaTek Bulletin).

The vulnerability is classified as a classic buffer overflow (CWE-120) due to a missing bounds check in the display component. It has been assigned a CVSS v3.1 Base Score of 6.7 MEDIUM (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) (NVD).

If exploited, this vulnerability could lead to local escalation of privilege with System execution privileges needed. The attack requires no user interaction for exploitation (MediaTek Bulletin).

The vulnerability requires local access and system execution privileges for exploitation. No user interaction is needed for exploitation, making it potentially attractive to attackers who have already gained initial access to the system (MediaTek Bulletin).

MediaTek has notified device OEMs of the issue and provided corresponding security patches. The vulnerability was disclosed to OEMs at least two months before public disclosure, allowing time for patch implementation (MediaTek Bulletin).