Security2 hOctober 22, 2026, 00:00

Critical Signal bug could keep mic and camera on after hangup

Signal's open-source RingRTC calling library had a critical flaw, CVE-2026-113380 (CVSS 9.3), where flooding the call's finite state machine queue blocked hangup requests, potentially leaving audio and video active. The issue is fixed in RingRTC 2.72.0, released in September.

The Register

Open source

Critical Signal bug could keep mic and camera on after hangup

Flaw affects every RingRTC version before 2.72.0
CVSS 9.3 with low attack complexity; no known exploitation in the wild
Fix adds a timeout and independent handling of termination requests
Users on Android, iOS and desktop should update the app

#Signal#RingRTC

New Apple TV could get a built-in mic and a remote with a speaker

Security

XRP Ledger overflow bug could have minted 18 trillion XRP

Security

XRP Ledger Skips Its Own Amendment Vote for First Time to Patch Critical Bug

Security

Critical Signal bug could keep mic and camera on after hangup

New Apple TV could get a built-in mic and a remote with a speaker

XRP Ledger overflow bug could have minted 18 trillion XRP

XRP Ledger Skips Its Own Amendment Vote for First Time to Patch Critical Bug

Google patches 42 Chrome security flaws including three critical bugs