PulseAudio is vulnerable to information disclosure. A race condition can occur if SCM_CREDENTIALS were missing casuing the snap policy module to fail to identify a client connection from a snap as coming from a snap , allowing the snap to connect to PulseAudio without proper confinement. This could be exploited by an attacker to expose sensitive information.