Android NFC Payment Setting Privilege Escalation Vulnerability

A vulnerability exists in the Android Settings application that allows an app on a work profile to change the main user's default NFC payment option. This issue arises from inadequate input validation, potentially leading to unauthorized privilege escalation. Notably, no additional execution rights are required for exploitation, and user interaction is unnecessary.

Impact

Exploitation of this vulnerability could result in unauthorized changes to NFC payment settings, allowing for local privilege escalation.

Remediation

Users can update their devices to the December 2025 security patch level to address this vulnerability.