CVE-2026-63915 nfc: hci: fix out-of-bounds read in HCP header parsing

🗓️ 19 Jul 2026 14:55:19Reported by GoogleType

osv

osv🔗 osv.dev👁 3 Views

Fix out-of-bounds read in NFC HCI HCP header parsing by adding packet header pull checks before access.

Reporter	Title	Published	Views	Family All 8
CVE	CVE-2026-63915	19 Jul 202614:55	–	cve
Cvelist	CVE-2026-63915 nfc: hci: fix out-of-bounds read in HCP header parsing	19 Jul 202614:55	–	cvelist
EUVD	EUVD-2026-45688	19 Jul 202614:55	–	euvd
NVD	CVE-2026-63915	19 Jul 202616:17	–	nvd
OSV	DEBIAN-CVE-2026-63915	19 Jul 202616:17	–	osv
OSV	UBUNTU-CVE-2026-63915	20 Jul 202600:00	–	osv
Positive Technologies	PT-2026-61232	19 Jul 202600:00	–	ptsecurity
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-63915	20 Jul 202600:00	–	nessus

Source	Link
git	www.git.kernel.org/stable/c/1905f5ec3641b2b234bb63549c8ca11ab85466eb
git	www.git.kernel.org/stable/c/22d41b176b9989efd21c3b2d3abf6728f05b9d9a
git	www.git.kernel.org/stable/c/37382293f174b82a0616c8295e32b1fc8e13d1ed
git	www.git.kernel.org/stable/c/83b1362edc9d6ae376c6f36da116e2c70f2e70a6
git	www.git.kernel.org/stable/c/b99366d74b535d0cadb1ef73e04639415d9ff3b7
git	www.git.kernel.org/stable/c/c4cc6b3b0013acb3ed0b2b60e57dfae98647fe98
git	www.git.kernel.org/stable/c/ed6d5d97dad0334a7f43d218753429cbe2f70a4f
git	www.git.kernel.org/stable/c/f040e590c035bfd9553fe79ee9585caf1b14d67b
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63915.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-63915

21 Jul 2026 03:47Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.18.8

EPSS0.0021

nfc hci hcp header out of bounds packet pull check kernel patch