The ST ST54-android-packages-apps-Nfc package before 130-20230215-23W07p0 for Android has an out-of-bounds read.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-36629.json"