What’s Vulnerable › Vulnerabilities

CVE-2023-36629

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-01-09 · updated 2026-06-17
• Weakness: CWE-125

Description

The ST ST54-android-packages-apps-Nfc package before 130-20230215-23W07p0 for Android has an out-of-bounds read.

Affected products

• St54-Android-Packages-Apps-Nfc: before 130-20230215-23w07p0 — fixed in 130-20230215-23w07p0

How to fix

Upgrade to a fixed version: St54-Android-Packages-Apps-Nfc 130-20230215-23w07p0. Check the vendor advisory for mitigations.

References

• https://github.com/STMicroelectronics/ST54-android-packages-apps-Nfc/releases/tag/130-20230215-23W07p0
• https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/hunting-for-android-privilege-escalation-with-a-32-line-fuzzer/
• https://www.trustwave.com/hubfs/Web/Library/Advisories_txt/TWSL2023-007_Xiaomi_Redmi_10sNote-1.txt
• https://github.com/STMicroelectronics/ST54-android-packages-apps-Nfc/releases/tag/130-20230215-23W07p0
• https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/hunting-for-android-privilege-escalation-with-a-32-line-fuzzer/
• https://www.trustwave.com/hubfs/Web/Library/Advisories_txt/TWSL2023-007_Xiaomi_Redmi_10sNote-1.txt

Get alerted when CVE-2023-36629 or the next vulnerability affects your stack