Androidx.car.app vulnerabilities

1 known vulnerability in Androidx.car.app from Google. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  Android: Deserialization of Untrusted Data

  CVE-2024-10382Nov 20, 2024Google

  There exists a code execution vulnerability in the Car App Android Jetpack Library. CarAppService uses deserialization logic that allows construction of arbitrary java classes. This can lead to arbitrary code execution when combined with specific Java deserial