WORLD WATCH · October 21, 2026 · NEWS
Signal bug leaves mic or camera active after hangup
A bug in Signal calling can leave a mic or camera active after hangup.
- Reported by
- The Register, Malware News
- Outlets reporting
- 2
- Category
- NEWS
- Identifiers
- CVE-2026-113380
- Newest report
- October 21, 2026
Plain-English brief. Written for readers who work in a second language.
Key takeaways
- A bug affects RingRTC versions earlier than 2.72.0.
- The flaw is tracked as CVE-2026-113380.
- A call participant may remain active after hangup.
What happened
The report comes from The Register. Malware News also reported the bug. The flaw affects RingRTC versions earlier than 2.72.0. It is tracked as CVE-2026-113380. A call participant may keep a mic or camera active after another user hangs up.
Why it matters
The bug can allow audio or video capture after a call ends. No confirmed use of the bug was stated in the source material. The risk applies only to calls on affected RingRTC versions.
What to do
- Update Signal to use RingRTC 2.72.0 or later.
- Check the installed Signal version before placing a call.
- End calls only after confirming the app state on affected versions.
SOURCE: INTEL128 WORLD WATCH (UPDATED OCT 21, 2026). This brief summarizes reporting by The Register, Malware News. Intel128 writes the summary and credits the outlet. Read the summary as a starting point, not as a substitute for the original reporting.