Signal CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL Signal CVE published 2026-10-20

CVE-2026-113380

A vulnerability in the RingRTC library before version 2.72.0 for Signal can cause a peer to interfere with the ability of a local hangup to tear down a call, including its audio and video tracks. This issue arises when a peer saturates a call's FSM queue, potentially disrupting call handling. Defenders should assess exposure and prioritize updating to version 2.72.0 or later to mitigate this vulnerability [truncated]