https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T15:19:56.682829+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-209172 EUVD-2026-209172 2026-10-09T15:19:56.720573+00:00 EUVD-2026-209172 https://cve.radiocsirt.org/vuln/fkie_cve-2024-10382 fkie_cve-2024-10382 2026-10-09T15:19:56.720611+00:00

There exists a code execution vulnerability in the Car App Android Jetpack Library. CarAppService uses deserialization logic that allows construction of arbitrary java classes. This can lead to arbitrary code execution when combined with specific Java deserialization gadgets. An attacker needs to install a malicious application on victims device to be able to attack any application that uses vulnerable library. We recommend upgrading the library past version 1.7.0-beta02.

 https://cve.radiocsirt.org/vuln/ghsa-pq4w-jf35-7pmx GHSA-pq4w-jf35-7pmx 2026-10-09T15:19:56.720647+00:00

There exists a code execution vulnerability in the Car App Android Jetpack Library. In the CarAppService desrialization logic is used that allows for arbitrary java classes to be constructed. In combination with other gadgets, this can lead to arbitrary code execution. An attacker needs to have an app on a victims Android device that uses the CarAppService Class and the victim would need to install a malicious app alongside it. We recommend upgrading the library past version 1.7.0-beta02