Signal fixes RingRTC flaw that can block hang-ups (CVE-2026-113380)
A remote peer can flood the call state machine so the microphone and possibly the camera stay on.
68
Product
RingRTC
- Mentions · 7d0
- Mentions · 30d6
- All mentions6
- First seenOct 21, 2026
- Last mentioned8d ago
Timeline
6 articles · newest firstSignal RingRTC before 2.72.0 can keep media flowing after hang-up
CVE-2026-113380, scored CVSS 4.0 9.3, lets a call peer delay teardown so audio and possibly video continue; no in-the-wild use is known.
64
Signal RingRTC before 2.72.0 can leave call audio open after hang-up
A call participant can flood RingRTC’s event queue so hang-up fails; CVSS 9.3, with no known exploitation.
64
Signal RingRTC before 2.72.0 can leave the mic on after hang-up
CVE-2026-113380, scored CVSS 9.3, lets a call participant fill a 256-entry queue and block teardown.
62
Signal RingRTC bug can leave mic and camera on after hangup
CVE-2026-113380, CVSS 9.3, affects RingRTC before 2.72.0; a conceptual proof of concept exists and CISA KEV does not list it.
64
Signal bug allows listening after hang-up
RingRTC versions before 2.72.0 could let participants hear audio after call end; no exploitation reported.
40
Related CVEs
by mentions- Call hangup bypass in Signal RingRTC before 2.72.0
Appears with
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.