Hi.
I'm writing my own routines to manage the PN7150.
I have successfully managed to send the CORE_RESET_CMD command and get its correct response.
The next step has been to send the CORE_INIT_CMD command:

And when reading the response, the third byte (not counting the initial I2C control byte) which is the payload length is equal to 25 (0x19).

But according to the NCI specification it would only be 18 bytes:

Is it an error or am I confused?
Regards