Signal RingRTC bug CVE-2026-113380 can leave mic and camera active after a call hangup
A vulnerability in Signal's open-source RingRTC calling library, tracked as CVE-2026-113380 (CVSS 9.3), can stop a call from terminating properly. This can leave audio and possibly video channels open after a user hangs up. MITRE published the CVE on Tuesday. The affected versions are every RingRTC release before 2.72.0, and the fix shipp…