CVE-2026-87726

3.9 Faible

Publiée le 08/10/2026 à 04:16 · Modifiée le 08/10/2026 à 23:33 · En attente d'analyse NVD · Source : cve@mitre.org

Description

Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00_Pub may allow an attacker with privileges or an untrusted third party to access unintended memory regions, potentially leading to limited loss of confidentiality, integrity, and availability. All software versions from 07.18.00 onwards have fixed this problem.

Traduire en français

Produits concernés

NxpNfcRdLib

Scores CVSS

Version	Score	Source	Vecteur
3.1	3.9 Faible	cve@mitre.org	`CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L`

Faiblesses (CWE)

CWE-787

Références

https://community.nxp.com/t5/Other-NXP-Products/NXPNfcRdLib-vulnerability-in-module-phalFelica-CVE-2026-87726/m-p/2414096#M33365
https://www.nxp.com/support/support/product-security-vulnerability:PSIRT

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories