AX·NEWS
Sign in

Vulnerability

CVE-2026-113380 — Signal RingRTC vulnerability

critical 9.3 1 story · 1 outlet

Official record (cve.org)NVDCVE watch

Impacted if

  • Signal RingRTC < 2.72.0

over the network · no login · a user must act

In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with the ability of a local hangup to tear the call (with its audio and perhaps also video track

First seen by AX-NEWS · latest story . Severity: NVD, or the CVE record while the NVD has not scored it. This product uses data from the NVD API but is not endorsed or certified by the NVD.

Coverage

  1. Signal bug could let someone keep listening after you hang up
    USMalwarebytes Labs Cybersecurity

    A recently disclosed flaw in Signal’s calling software could allow another participant to keep hearing you after you hang up. The vulnerability, tracked as CVE-2026-113380 ( CVSS score 9.3 out of 10), affects RingRTC versions earlier than…