CVE-2023-52349: 
NixOS vulnerability analysis and mitigation

CVE-2023-52349 is a vulnerability discovered in the RIL (Radio Interface Layer) service affecting Android devices. The vulnerability was disclosed on April 7, 2024, and is characterized as an out-of-bounds write vulnerability due to a missing bounds check. This vulnerability affects multiple UNISOC chipsets including SC7731E, SC9832E, SC9863A, T310, T606, T612, T616, T610, T618, T760, T770, T820, and S8000, running on Android versions 12, 13, and 14 (Unisoc Advisory).

The vulnerability is classified as CWE-787 (Out-of-bounds Write) and has been assigned a CVSS v3.1 base score of 4.4 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H. The issue stems from a missing bounds check in the RIL service implementation, which could potentially allow for writing data beyond the intended memory boundaries (NVD).

If exploited, this vulnerability could lead to local denial of service with System execution privileges required. The impact is primarily focused on the availability of the system, with no direct impact on confidentiality or integrity (Unisoc Advisory).

The vulnerability requires local access and high privileges for exploitation. The attack complexity is considered low, but user interaction is not required for exploitation. The attacker would need System execution privileges to successfully exploit this vulnerability (NVD).

The vulnerability affects Android versions 12, 13, and 14 on specific UNISOC chipsets. Users should ensure their devices are updated with the latest security patches provided by their device manufacturers (Unisoc Advisory).