Signal flaw could expose audio and video even after users hang up

A flaw in Signal’s calling library could let the other person on a call keep receiving a user’s audio, and possibly video, after that user hangs up. Tracked as CVE-2026-113380, the vulnerability affects RingRTC versions before 2.72.0. RingRTC is the open source library that powers voice and video…

devsecurity

Sources

Vulnerabilities

Why this score
Signals contributing to the severity score
SignalPoints
cvss critical — 9.320