So from a brief read - Android 4.1+ (JB and above) include full ASLR which will mitigate this vulnerability somewhat - From my own Android experience, the scr

So from a brief read - Android 4.1+ (JB and above) include full ASLR which will mitigate this vulnerability somewhat - From my own Android experience, the screen must be active for the NFC receiver to active. This means the phone can't be exploited while it sits in your pocket.