CVE-2023-24068

CVE-2023-24068 affects Signal Desktop versions prior to 6.2.0 on Windows, Linux, and macOS, allowing an attacker with local access to modify or replace cached conversation attachments. This vulnerability, rated High (CVSS 7.8), enables an attacker to insert malicious code into existing files or swap them entirely, with the modified files retaining their original name and size when forwarded, facilitating malware masquerading. While the vendor disputes its relevance due to the required local access, there is no known active exploitation, public exploit code, or significant media coverage, though it has garnered some community discussion.