Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
3.9
CVE-2026-87726: NXP NFC library can expose memory to privileged users
CVE-2026-87726 · published 11 days ago
Summary
The NXP NFC library (NXPNfcRdLib) versions up to 07.14.00 allow code that checks limits incorrectly, so someone with access rights or an untrusted party could read or alter memory they shouldn’t. This could lead to a small amount of data being exposed or altered. Upgrade to version 07.18.00 or later to fix the issue.
What to do
- Update nxp nxpnfcrdlib to version 07.18.00 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| nxp | nxpnfcrdlib | < 07.18.00 |
Original advisory text
Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00_Pub may allow an attacker with privileges or an untrusted third party to access unintended memory regions, p...
Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00_Pub may allow an attacker with privileges or an untrusted third party to access unintended memory regions, potentially leading to limited loss of confidentiality, integrity, and availability. All software versions from 07.18.00 onwards have fixed this problem.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-787Out-of-bounds Write
Timeline
Published8 Oct 2026
Updated8 Oct 2026
First seen8 Oct 2026
Track software like this
Free during beta