Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.0
Nfc Software May Allow Hackers to Gain Elevated Privileges
CVE-2025-48641
ASB-A-392699284
Summary
A bug in the Nfc software could allow an attacker to gain more access to the system than they should have, without needing any special permissions. This means a hacker could potentially take control of the system or access sensitive data. To protect your system, update the Nfc software to the latest version.
What to do
- Update google platform/hardware/st/nfc to version 16-qpr2-next:2026-03-01.
- Update google platform/hardware/st/nfc to version 15:2026-03-01.
- Update google platform/hardware/st/nfc to version 16:2026-03-01.
- Update google platform/hardware/st/nfc to version 16-qpr2:2026-03-01.
- Update google platform/hardware/st/nfc to version 14:2026-03-01.
Affected software
| Vendor | Product | Affected versions | Fix available |
|---|---|---|---|
| android | 14.0 | – | |
| android | 15.0 | – | |
| android | 16.0 | – | |
| android | 16.0 | – | |
| android | 16.0 | – | |
| android | 16.0 | – | |
| platform/hardware/st/nfc | > 16-qpr2-next:0 , <= 16-qpr2-next:2026-03-01 | 16-qpr2-next:2026-03-01 | |
| platform/hardware/st/nfc | > 15:0 , <= 15:2026-03-01 | 15:2026-03-01 | |
| platform/hardware/st/nfc | > 16:0 , <= 16:2026-03-01 | 16:2026-03-01 | |
| platform/hardware/st/nfc | > 16-qpr2:0 , <= 16-qpr2:2026-03-01 | 16-qpr2:2026-03-01 | |
| platform/hardware/st/nfc | > 14:0 , <= 14:2026-03-01 | 14:2026-03-01 |
Original title
In multiple functions of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User int...
Original description
In multiple functions of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
nvd CVSS3.1
7.0
Vulnerability type
CWE-362
Race Condition
Published: 1 Mar 2026 · Updated: 13 Mar 2026 · First seen: 6 Mar 2026