Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.0

Nfc Software May Allow Hackers to Gain Elevated Privileges

CVE-2025-48641 ASB-A-392699284
Summary

A bug in the Nfc software could allow an attacker to gain more access to the system than they should have, without needing any special permissions. This means a hacker could potentially take control of the system or access sensitive data. To protect your system, update the Nfc software to the latest version.

What to do
  • Update google platform/hardware/st/nfc to version 16-qpr2-next:2026-03-01.
  • Update google platform/hardware/st/nfc to version 15:2026-03-01.
  • Update google platform/hardware/st/nfc to version 16:2026-03-01.
  • Update google platform/hardware/st/nfc to version 16-qpr2:2026-03-01.
  • Update google platform/hardware/st/nfc to version 14:2026-03-01.
Affected software
VendorProductAffected versionsFix available
google android 14.0
google android 15.0
google android 16.0
google android 16.0
google android 16.0
google android 16.0
google platform/hardware/st/nfc > 16-qpr2-next:0 , <= 16-qpr2-next:2026-03-01 16-qpr2-next:2026-03-01
google platform/hardware/st/nfc > 15:0 , <= 15:2026-03-01 15:2026-03-01
google platform/hardware/st/nfc > 16:0 , <= 16:2026-03-01 16:2026-03-01
google platform/hardware/st/nfc > 16-qpr2:0 , <= 16-qpr2:2026-03-01 16-qpr2:2026-03-01
google platform/hardware/st/nfc > 14:0 , <= 14:2026-03-01 14:2026-03-01
Original title
In multiple functions of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User int...
Original description
In multiple functions of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
nvd CVSS3.1 7.0
Vulnerability type
CWE-362 Race Condition
Published: 1 Mar 2026 · Updated: 13 Mar 2026 · First seen: 6 Mar 2026