Linh Le

يحتوي البرنامج على مشكلة تتعلق بإشارة مؤشر NULL في الدالة `mbedtls asn1 store named data`. يحدث هذا عندما يتم استدعاء بيانات متعارضة حيث تكون قيمة `val.p` هي NULL، بينما تكون قيمة `val.len` أكبر من الصفر.

The issue is related to a code execution vulnerability in the Car App Android Jetpack Library. Specifically, the `CarAppService` uses deserialization logic that allows the construction of arbitrary Java classes, which can lead to arbitrary code execution when combined with specific Java deserialization gadgets. An attacker needs to install a malicious application on the victim's device to attack any application that uses the vulnerable library.