# Critical Signal flaw could leave calls recording after hang-up

- URL: https://talkfuse.com/story/signal-bug-could-keep-your-mic-and-camera-on-after-hangup/
- Published: 2026-10-21T17:00:58+00:00
- Updated: 2026-10-21T17:38:17+00:00
- Original publisher: The Register
- Original article: https://www.theregister.com/security/2026/10/21/signal-bug-could-keep-your-mic-and-camera-on-after-hangup/5304528
- Topics: Software, Technology

## Key points

- A critical RingRTC bug could leave Signal calls active after hang-up.
- It affects versions before 2.72.0.
- Update Signal on all your devices.

## Summary

A bug in Signal’s calling library could stop a call from ending properly, leaving audio or video active after someone believes they have hung up. The flaw was rated critical, with a CVSS score of 9.3, and could expose users to unintended recording or viewing if exploited.

The vulnerability, CVE-2026-113380, affects RingRTC versions before 2.72.0. A caller could overwhelm the library’s event queue so it fails to process a hang-up request; the fix makes termination requests independent of that queue and adds a timeout. The article says there is no indication the flaw has been exploited in the wild, and advises updating Signal on mobile and desktop.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.