CVE-2023-42705: 
NixOS vulnerability analysis and mitigation

CVE-2023-42705 is a security vulnerability discovered in the imsservice component of Android systems. The vulnerability stems from a missing permission check that could allow unauthorized access to app permission usage records. The issue was disclosed in December 2023 and affects various Android versions and Unisoc hardware platforms (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. The issue is classified as CWE-862 (Missing Authorization) and affects the permission checking mechanism in the imsservice component. The vulnerability requires local access but does not need additional execution privileges for exploitation (NVD).

The vulnerability allows potential attackers to write permission usage records of an application, leading to local information disclosure. This could compromise the privacy and security of app permission data on affected devices (NVD).

The vulnerability affects multiple Android versions and Unisoc hardware platforms. Users should ensure their devices are updated with the latest security patches provided by their device manufacturers (NVD).