CVE-2023-32867: 
NixOS vulnerability analysis and mitigation

In display drm, there is a possible out of bounds write vulnerability (CVE-2023-32867) discovered and disclosed in December 2023. The vulnerability affects MediaTek chipsets running Android 12.0 and 13.0, including multiple series like MT6761, MT6765, MT6768, and others. This security flaw is due to a missing bounds check in the display drm component (MediaTek Bulletin).

The vulnerability is classified as a medium severity out-of-bounds write issue (CWE-787) with a CVSS v3.1 base score of 6.7 MEDIUM (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). The technical root cause is identified as a missing bounds check in the display drm component, which could allow unauthorized write operations beyond intended memory boundaries (NVD).

The vulnerability could lead to local escalation of privilege with System execution privileges needed. The successful exploitation requires no user interaction but does require system-level privileges for execution (MediaTek Bulletin).

MediaTek has addressed this vulnerability and notified device OEMs of the security patches at least two months before publication. The fix has been implemented in the affected Android versions 12.0 and 13.0 (MediaTek Bulletin).