Signal's calling code had a bug. Someone on the other end of a call could overload it so your 'hang up' did not fully end the call. News reports said your microphone or camera could stay on. Signal fixed the calling code in version 2.72.0, and Signal Desktop 8.31.0 and newer include the fixed library.
- Status
- Patched: update now
- Being attacked?
- Not known[1]
- Severity
- Critical
- Updated
No report that anyone is using this bug. Severity: NVD score 9.3 out of 10 (not yet fully reviewed by NVD). First reported .
Am I affected?
You may be at risk if you use Signal Desktop older than 8.31.0. Open Signal and check Help > About Signal Desktop. We have only checked 8.31.0 and later, so an earlier version might also be fixed, but we cannot confirm it.
| App | Device | Affected | Fixed in |
|---|---|---|---|
| Signal Desktop | Windows | Signal Desktop older than 8.31.0 (earlier builds not checked) | 8.31.0[2][3] |
| Signal Desktop | Mac | Signal Desktop older than 8.31.0 (earlier builds not checked) | 8.31.0[2][3] |
| Signal Desktop | Linux | Signal Desktop older than 8.31.0 (earlier builds not checked) | 8.31.0[2][3] |
How to check your version
These checks only look. They do not change anything on your computer.
Signal Desktop on Windows
Easy way: Open Signal. Windows and Linux: Help > About Signal Desktop. Mac: Signal > About Signal Desktop.
Or type this in PowerShellRead-only. It only reads the version and changes nothing.
Get-ItemProperty 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\*','HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\*','HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\*' -ErrorAction SilentlyContinue | Where-Object DisplayName -like '*Signal*' | Select-Object DisplayName,DisplayVersion
Signal Desktop on Mac
Easy way: Open Signal. Menu bar: Signal > About Signal Desktop.
Or type this in TerminalRead-only. It only reads the version and changes nothing.
defaults read "/Applications/Signal.app/Contents/Info" CFBundleShortVersionString
Signal Desktop on Linux
Easy way: Open the app and look in its Help or About menu, or check your software manager.
How to fix it
- Open Signal Desktop. It normally updates itself and asks you to restart.
- If it did not, download the newest version from signal.org.
- Check Help > About Signal Desktop shows 8.31.0 or newer.
- When a call ends, check that your microphone and camera lights go off.
More on each app: Is my Signal up to date?
Official links
Check before installing, and only use these official links or the app's own update button.
For AI agents
This page as data: /incidents/signal-desktop-call-hang-up-bug.json. All problems: /feed.json. Use read-only checks only, and ask before installing anything.
Tracking numbers (CVE): CVE-2026-113380
Sources
- NVDNVD: CVE-2026-113380 (RingRTC before 2.72.0) (Oct 20, 2026)
- MakerSignal Desktop v8.31.0 package.json (uses RingRTC 2.72.1) (Oct 15, 2026)
- MakerSignal Desktop v8.32.0 package.json (uses RingRTC 2.72.1) (Oct 20, 2026)
"Maker", "CISA", "NVD", "GitHub advisory" and "Official notice" are official sources. "Researcher" and "News" are extra context.