Signal fixed this calling flaw on 4 September. The 9.3 score, the CVE and the coverage all arrived six weeks later
2026-10-22Security
CVE-2026-113380 lets a caller flood the event queue so your hangup never completes and the audio keeps running. Signal has published no advisory, no release note and no blog post. MITRE assigned it.