What is the CVSS score of CVE-2025-48641?

CVE-2025-48641 has a CVSS 3.1 base score of 7.0 (High). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Android are affected by CVE-2025-48641?

CVE-2025-48641 is a local privilege escalation vulnerability in NFC functionality that could allow authenticated users to gain elevated system access through a race condition.

How to fix or mitigate CVE-2025-48641?

Within 24 hours: inventory all systems running affected NFC.h implementations and disable NFC functionality where not business-critical. Within 7 days: implement application-level access controls and monitor for suspicious NFC activity; coordinate with vendor for patch timeline. Within 30 days: develop and test compensating controls; consider restricting NFC access to trusted users only; prepare emergency patching procedures for when vendor releases fix.

Android CVE-2025-48641

HIGH

Race Condition (CWE-362)

2026-03-02 security@android.com

Privilege Escalation Google Use After Free Race Condition Android

7.0

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Mar 02, 2026 - 19:16 nvd

HIGH 7.0

DescriptionNVD

In multiple functions of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

AnalysisAI

Technical ContextAI

Classified as CWE-362 (Race Condition). Affects the multiple component of Android. In multiple functions of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.