Vulnerabilities in Carrier software