CVE-2024-20844: 
NixOS vulnerability analysis and mitigation

Out-of-bounds write vulnerability was discovered in libsavsac.so library affecting Samsung mobile devices prior to SMR Apr-2024 Release 1. The vulnerability was assigned CVE-2024-20844 and was reported to Samsung Mobile. This security flaw affects devices running Android versions 12, 13, and 14 (Samsung Advisory).

The vulnerability is classified as an out-of-bounds write issue (CWE-787) that occurs while parsing remaining codewords in libsavsac.so. The severity is rated as HIGH with a CVSS v3.1 base score of 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) according to NIST's assessment, while Samsung Mobile rated it slightly higher at 8.4 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) (NVD).

If successfully exploited, this vulnerability allows local attackers to execute arbitrary code on the affected device. The high severity ratings indicate that successful exploitation could lead to complete compromise of the system's confidentiality, integrity, and availability (NVD).

The vulnerability requires local access to the device for exploitation. No user interaction is needed for exploitation according to Samsung's CVSS scoring, though privilege escalation is possible through this vulnerability (NVD).

Samsung has addressed this vulnerability in the SMR Apr-2024 Release 1 security update. Users are strongly advised to update their devices to the latest security patch level to protect against this vulnerability (Samsung Advisory).