aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which allows local users to hijack the IPC by pre-creating the temporary directory.
CVSS 3.0HIGH 7.0·Local·Low privileges·No interaction·EPSS 0.00245·Published 2017-07-25·Will not fixCWE-362