I'm using SDKv15.2.0
I think there is a problem in nrf_dfu_app_is_valid() in components/libraries/bootloader/dfu/nrf_dfu_utils.c
If the CRC check fails, the return value should be false, not NRF_DFU_DEBUG which evals to true and which would indicate the CRC check has passed.