CVE-2026-113380

— UNSCOREDpublic exploit available

Published 2026-10-20 · Updated 2026-10-20

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with the ability of a local hangup to tear the call (with its audio and perhaps also video track) down.

Weaknesses

CWE-754

Public exploit & PoC references

https://github.com/signalapp/ringrtc/commit/4b1b6fa53c9f30c87c8ea78e44675d4a13e1e4d3
https://github.com/signalapp/ringrtc/compare/v2.71.0...v2.72.0

All references

https://github.com/signalapp/ringrtc/commit/4b1b6fa53c9f30c87c8ea78e44675d4a13e1e4d3
https://github.com/signalapp/ringrtc/compare/v2.71.0...v2.72.0

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

UNSCOREDCVE-2026-0317
UNSCOREDCVE-2026-0318
UNSCOREDCVE-2026-0319
UNSCOREDCVE-2026-0321
HIGHCVE-2026-100296
HIGHCVE-2026-100352PoC
HIGHCVE-2026-102077
MEDIUMCVE-2026-104432PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.