← All vulnerabilities
CVE-2026-113380

In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with the ability of a local hangup t

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Fix
Fixed in 2.72.0
Public exploit
None on Exploit-DB

Summary

In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with the ability of a local hangup to tear the call (with its audio and perhaps also video track) down.

Affected versions

  • Signal RingRTC

    fixed in 2.72.0

References 2

GitHub · signalapp/ringrtc