{
  "id": 15916473,
  "title": "Signal bug could keep your mic - and camera - on after hangup",
  "url": "https://urgent.news/2026/10/21/signal-bug-could-keep-your-mic-and-camera-on-after-hangup",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-21T17:00:58.000Z",
  "source": {
    "name": "The Register Software",
    "slug": "the-register-software",
    "url": "https://www.theregister.com/security/2026/10/21/signal-bug-could-keep-your-mic-and-camera-on-after-hangup/5304528"
  },
  "original_language": "en",
  "account": "A security flaw in Signal's encrypted calling library, RingRTC, may leave audio and video streams active even after a call has been ended. The vulnerability, CVE-2026-113380, was disclosed on Tuesday and affects all versions of RingRTC prior to 2.72.0, which was released last month. The issue lies within RingRTC's finite state machine (FSM) event queue, which handles call management events. By flooding the queue with requests, one party on the call can overwhelm the system and prevent a hangup request from being processed. This could result in a denial-of-service attack, leaving the call open and potentially exposing users to eavesdropping. The problem is classified as CVE-2026-113380, with a critical CVSS score of 9.3. Signal has not publicly confirmed when the fix was rolled out across all platforms, but users are advised to update their apps as soon as possible to avoid any potential issues.",
  "summary": "Careful what you say after goodbye, or better yet, update your messaging app",
  "key_points": [
    "Security flaw in Signal's RingRTC library may leave audio and video streams active after call ends.",
    "Vulnerability CVE-2026-113380 affects all RingRTC versions prior to 2.72.0.",
    "Fix released in last month's update; users advised to update apps immediately."
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "The Register Science",
        "title": "Signal bug could keep your mic - and camera - on after hangup",
        "url": "https://urgent.news/2026/10/21/signal-bug-could-keep-your-mic-and-camera-on-after-hangup-15921634",
        "published": "2026-10-21T17:00:58.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}