CVE-2023-48358: 
NixOS vulnerability analysis and mitigation

CVE-2023-48358 is a vulnerability discovered in the DRM driver that was disclosed on January 17, 2024. The vulnerability affects various UNISOC chipsets and Android versions 11.0 through 13.0. The issue stems from a possible out-of-bounds write condition due to a missing bounds check in the DRM driver (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 4.4 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H. The weakness has been classified as CWE-787 (Out-of-bounds Write). The affected components include multiple UNISOC chipsets (S8000, SC7731E, SC9832E, SC9863A, T310, T606, T610, T612, T616, T618, T760, T770, T820) and Android versions 11.0 through 13.0 (NVD).

The vulnerability could lead to local denial of service with System execution privileges needed. The impact is primarily focused on availability, with no direct impact on confidentiality or integrity as indicated by the CVSS metrics (NVD).

The vulnerability has been addressed by UNISOC, and users are advised to update to the latest available firmware versions for their affected devices (Vendor Advisory).