That would be a vulnerability inherent in the OS / tag-reading software itself, and would need to be dealt with just like any other threat (malicious file downl

That would be a vulnerability inherent in the OS / tag-reading software itself, and would need to be dealt with just like any other threat (malicious file downloads, URLs, etc.) Under normal circumstances the phone shouldn't have any bug causing it to execute anything read from the NFC tag as code.