As cited
Copy frozen at (site build).
vulnerabilities
Signal bug could keep your mic - and camera - on after hangup
A bug in Signal's RingRTC calling library (CVE-2026-113380) could fail to properly terminate voice or video calls if one participant floods the finite state machine event queue with requests, potentially leaving audio or video active after the other party believes the call has ended. The vulnerability affects all versions before 2.72.0, which was released in September 2026. Signal users should update to the latest version across all platforms to address the issue.
Why it matters: Signal users face exposure to unintended audio or video capture during calls if they have not updated to version 2.72.0 or later, requiring immediate verification of installed versions across mobile and desktop apps.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Signal bug could keep your mic - and camera - on after hangup
A bug in Signal's RingRTC calling library (CVE-2026-113380) could fail to properly terminate voice or video calls if one participant floods the finite state machine event queue with requests, potentially leaving audio or video active after the other party believes the call has ended. The vulnerability affects all versions before 2.72.0, which was released in September 2026. Signal users should update to the latest version across all platforms to address the issue.
Why it matters: Signal users face exposure to unintended audio or video capture during calls if they have not updated to version 2.72.0 or later, requiring immediate verification of installed versions across mobile and desktop apps.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Signal bug could keep your mic - and camera - on after hangup
A bug in Signal's RingRTC calling library (CVE-2026-113380) could fail to properly terminate voice or video calls if one participant floods the finite state machine event queue with requests, potentially leaving audio or video active after the other party believes the call has ended. The vulnerability affects all versions before 2.72.0, which was released in September 2026. Signal users should update to the latest version across all platforms to address the issue.
Why it matters: Signal users face exposure to unintended audio or video capture during calls if they have not updated to version 2.72.0 or later, requiring immediate verification of installed versions across mobile and desktop apps.
- Source published
- First seen by Cybersecurity Tracker