SIGNAL BUG COULD LET SOMEONE KEEP LISTENING AFTER YOU HANG UP

Summary from the TLDR InfoSec newsletter

A malicious call participant could flood RingRTC's internal event queue to keep Signal call audio flowing after the other party hung up, a flaw tracked as CVE-2026-113380 (CVSS 9.3) and fixed in RingRTC 2.72.0.