p PatchFirst

CVE-2026-113380

CVE-2026-113380

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with the ability of a local hangup to tear the call (with its audio and perhaps also video track) down.

CVSS 9.3 · Critical · EPSS 0.3% · Fix available

Published
Updated

Affected products and versions

  • ringrtc

    Versions
    • ≥ 0, < 2.72.0: Affected (semver)

    Update to 2.72.0

Original sources

Check your server →