"it might link to a parking garage database of which parking slots are open"
Imagine creating a QR code, (or copying one that already exists) which tells the car to fetch information from http://your.competitor.example.com/. Then imagine going out late at night and sticking it on a busy motorway.
DOS by traffic.
Also. You better hope that your car doesn't have any vulnerabilities that can be abused by a specially crafted QR code, or by fetching specially crafted data that a QR code prompts it to fetch.