CVE-2023-48345: 
NixOS vulnerability analysis and mitigation

CVE-2023-48345 is a vulnerability discovered in the video decoder component of Unisoc devices. The vulnerability was first disclosed on January 17, 2024, and affects multiple Unisoc hardware platforms including Android versions 11.0 and 12.0. This out-of-bounds read vulnerability is due to improper input validation in the video decoder component (NVD).

The vulnerability is classified as a CWE-125 (Out-of-bounds Read) type vulnerability. It has received a CVSS v3.1 base score of 5.5 (Medium) with the following vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. The vulnerability affects various Unisoc hardware platforms including S8000, SC7731E, SC9832E, SC9863A, T310, T606, T610, T612, T616, T618, T760, T770, and T820 (NVD).

When exploited, this vulnerability could lead to local denial of service with no additional execution privileges needed. The attack requires local access to the system (NVD).

Unisoc has released an advisory regarding this vulnerability. Users and administrators should refer to the vendor's security advisory for specific mitigation steps and updates (Vendor Advisory).