Signal's hang-up button waited in the same queue as everything else, so a caller who flooded it could keep your audio streaming (CVE-2026-113380)
In RingRTC before 2.72.0, a local hang-up was one more event at the back of the call's queue. A peer who kept that queue full could stall the teardown. Signal's fix ends calls out of band, with a five-second deadline.