A critical Signal calling flaw could let a malicious participant continue hearing audio after the other user hangs up.