I want to have a deeper understanding of the security of Android Automotive OS (AAOS), and I find that there are several disclosed CVEs under Android Automotive OS Update Bulletin. But it seems that there aren't any detailed description of the code related, or any patch available. How can I find the patch for a CVE of Android Automotive OS?
I find some entries of the CVEs on NVD or other disclosure website, but there are just brief description without source code knowledgement. Since ASOP is a open-source project, I think there might be some specific patches for CVEs?