CVE-2023-42749: 
NixOS vulnerability analysis and mitigation

In enginnermode service, there is a possible way to write permission usage records of an app due to a missing permission check. This vulnerability (CVE-2023-42749) affects various Android versions (11.0, 12.0, 13.0) and multiple UNISOC hardware platforms including S8000, SC7731E, SC9832E, SC9863A, T310, and T606. The vulnerability was disclosed in December 2023 (NVD).

The vulnerability is characterized by a missing permission check in the enginnermode service, which could lead to unauthorized writing of permission usage records. The severity of this vulnerability has been assessed with a CVSS v3.1 Base Score of 5.5 (Medium), with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N (NVD).

This vulnerability could lead to local information disclosure without requiring additional execution privileges. The impact is primarily focused on unauthorized access to permission usage records, potentially compromising the confidentiality of app permission data (NVD).

The vulnerability affects specific versions of Android and UNISOC hardware platforms. Users and administrators should ensure their devices are updated with the latest security patches provided by their device manufacturers (NVD).