The automotive software vulnerabilities hiding in your dashboard

Researchers built an automotive-focused scanner (VERA) to inventory known vulnerabilities in in-vehicle operating systems and found large, uneven counts across platforms (e.g., Automotive Grade Linux with many documented flaws versus much smaller, safety-focused stacks). The report emphasizes that vulnerability counts are a to-do list rather than proof of exploitable risk, demonstrates two lab attacks with differing outcomes across platforms, and highlights scanner false positives and limitations of lab-only testing versus real cars.