Signal flaw could expose audio and video even after users hang up

A flaw in Signal’s calling library could let the other person on a call keep receiving a user’s audio, and possibly video, after that user hangs up, Help Net Security reports. Tracked as CVE-2026-113380, the vulnerability affects RingRTC versions before 2.72.0; RingRTC is the open source library that powers voice and video calls in Signal’s apps.