VYPR

Androidx.car.app

by Google

CVEs (1)

  • CVE-2024-10382HigNov 20, 2024
    risk 0.49cvss 7.5epss 0.00

    There exists a code execution vulnerability in the Car App Android Jetpack Library. CarAppService uses deserialization logic that allows construction of arbitrary java classes. This can lead to arbitrary code execution when combined with specific Java deserialization gadgets. An…