VULNERABILITY INTELLIGENCE
CVE-2024-29069
CVSS score7.3 HIGH
EPSS probability0.48%
CISA KEVNot currently listed
Published2024-07-25
Last modified2026-06-17
Description
In snapd versions prior to 2.62, snapd failed to properly check the destination of symbolic links when extracting a snap. The snap format is a squashfs file-system image and so can contain symbolic links and other file types. Various file entries within the snap squashfs image (such as icons and de…