Signal Flaw Could Keep Calls Active After Hang Up
A critical RingRTC vulnerability lets malicious callers delay call termination, exposing microphone and camera.
70
Vendor
Signal
- Mentions · 7d0
- Mentions · 30d7
- All mentions9
- First seenAug 12, 2026
- Last mentioned8d ago
Timeline
9 articles · newest firstSignal fixes RingRTC flaw that can block hang-ups (CVE-2026-113380)
A remote peer can flood the call state machine so the microphone and possibly the camera stay on.
68
Signal RingRTC before 2.72.0 can keep media flowing after hang-up
CVE-2026-113380, scored CVSS 4.0 9.3, lets a call peer delay teardown so audio and possibly video continue; no in-the-wild use is known.
64
Signal RingRTC before 2.72.0 can leave call audio open after hang-up
A call participant can flood RingRTC’s event queue so hang-up fails; CVSS 9.3, with no known exploitation.
64
Signal RingRTC before 2.72.0 can leave the mic on after hang-up
CVE-2026-113380, scored CVSS 9.3, lets a call participant fill a 256-entry queue and block teardown.
62
Signal RingRTC bug can leave mic and camera on after hangup
CVE-2026-113380, CVSS 9.3, affects RingRTC before 2.72.0; a conceptual proof of concept exists and CISA KEV does not list it.
64
Signal bug allows listening after hang-up
RingRTC versions before 2.72.0 could let participants hear audio after call end; no exploitation reported.
40
From Specs to Apps: Verifying and Monitoring Models of Signal and WhatsApp
Researchers use the SpecMon runtime monitor to verify WhatsApp Web and Signal Desktop against formal Signal protocol models, finding undocumented libsignal fork differences.
45
Signal's new security feature checks if your encrypted chats were tampered with
Signal adds automatic key verification, a key-transparency system audited by Cloudflare and Trail of Bits that detects key-directory tampering in E2EE chats.
45
Related CVEs
by mentions- Call hangup bypass in Signal RingRTC before 2.72.0
Appears with
- RingRTCproduct · 6
- MITREorganization · 3
- Signalorganization · 2
- CISAorganization · 2
- WhatsApporganization · 1
- WhatsAppvendor · 1
- Tamarinproduct · 1
- Signalproduct · 1
- SpecMonproduct · 1
- NISTorganization · 1
- Cloudflareorganization · 1
- Cloudflarevendor · 1
- Signal Desktopproduct · 1
- libsignalproduct · 1
- WhatsApp Webproduct · 1
- Trail of Bitsorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.