CVE-2024-20879: 
NixOS vulnerability analysis and mitigation

CVE-2024-20879 is a security vulnerability affecting Samsung's libsavscmn.so library prior to SMR Jun-2024 Release 1. The vulnerability is characterized as an improper input validation issue that allows local attackers to write out-of-bounds memory (NVD, CVE).

The vulnerability has been assigned a CVSS v3.1 base score of 7.1 (HIGH) by NIST with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H, while Samsung Mobile assigned it a score of 4.0 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L. The vulnerability affects Samsung Android versions 12.0, 13.0, and 14.0 across multiple security maintenance releases (NVD).

When exploited, this vulnerability allows local attackers to write to out-of-bounds memory locations, which could potentially lead to arbitrary code execution or system instability (NVD).

The vulnerability requires local access to exploit, with low attack complexity and no user interaction needed. The attack requires low privileges to execute (NVD).

Samsung has addressed this vulnerability in the SMR Jun-2024 Release 1 update. Users are advised to update their devices to this version or later to mitigate the risk (Samsung Mobile).