Low severity3.9NVD Advisory· Published Oct 8, 2026

CVE-2026-87726

Description

Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00_Pub may allow an attacker with privileges or an untrusted third party to access unintended memory regions, potentially leading to limited loss of confidentiality, integrity, and availability. All software versions from 07.18.00 onwards have fixed this problem.

Affected products

Nxp/NXPNfcRdLibllm-create
Range: <=07.14.00_Pub, >=07.18.00

Patches

Vulnerability mechanics

References

community.nxp.com/t5/Other-NXP-Products/NXPNfcRdLib-vulnerability-in-module-phalFelica-CVE-2026-87726/m-p/2414096nvd
www.nxp.com/support/support/product-security-vulnerability:PSIRTnvd

News mentions

No linked articles in our index yet.

cvss	0.254
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000