diff --git a/.github/workflows/diffuse.yml b/.github/workflows/diffuse.yml
index 99954ce8c3..a444963871 100644
--- a/.github/workflows/diffuse.yml
+++ b/.github/workflows/diffuse.yml
@@ -7,6 +7,9 @@ permissions:
   contents: read # to fetch code (actions/checkout)
   pull-requests: write # to comment on PR
 
+env:
+  NDK_VERSION: '27.0.12077973'
+
 jobs:
   assemble-base:
     if: ${{ github.repository != 'signalapp/Signal-Android' }}
@@ -25,6 +28,9 @@ jobs:
         java-version: 17
         cache: gradle
 
+    - name: Install NDK
+      run: echo "y" | ${ANDROID_SDK_ROOT}/cmdline-tools/latest/bin/sdkmanager --install "ndk;${{ env.NDK_VERSION }}"
+
     - name: Validate Gradle Wrapper
       uses: gradle/wrapper-validation-action@v1
 
@@ -35,7 +41,6 @@ jobs:
         path: diffuse-base.apk
         key: diffuse-${{ github.event.pull_request.base.sha }}
 
-
     - name: Build with Gradle
       if: steps.cache-base.outputs.cache-hit != 'true'
       run: ./gradlew assemblePlayProdRelease
@@ -70,7 +75,7 @@ jobs:
     - uses: peter-evans/create-or-update-comment@v3
       with:
         body: |
-          Diffuse output: 
+          Diffuse output:
 
           ${{ steps.diffuse.outputs.diff-gh-comment }}
         edit-mode: replace
diff --git a/dependencies.gradle.kts b/dependencies.gradle.kts
index ea2aef5458..39fec952b0 100644
--- a/dependencies.gradle.kts
+++ b/dependencies.gradle.kts
@@ -127,7 +127,7 @@ dependencyResolutionManagement {
       library("libsignal-client", "org.signal", "libsignal-client").versionRef("libsignal-client")
       library("libsignal-android", "org.signal", "libsignal-android").versionRef("libsignal-client")
       library("signal-aesgcmprovider", "org.signal:aesgcmprovider:0.0.3")
-      library("signal-ringrtc", "org.signal:ringrtc-android:2.48.0")
+      library("signal-ringrtc", "org.signal:ringrtc-android:2.48.1")
       library("signal-android-database-sqlcipher", "org.signal:sqlcipher-android:4.6.0-S1")
 
       // Third Party
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 7a0319e153..78075e5a3d 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -9013,12 +9013,12 @@ https://docs.gradle.org/current/userguide/dependency_verification.html
             <sha256 value="b5c2286424587ecef626a1219b19b37423d9bb6b25669078af0eabf039ba2f98" origin="Generated by Gradle"/>
          </artifact>
       </component>
-      <component group="org.signal" name="ringrtc-android" version="2.48.0">
-         <artifact name="ringrtc-android-2.48.0.aar">
-            <sha256 value="5fc3a7bb9b881dd0a659bfb02fc29ea0a725027844744828255bd75f8f87cd2c" origin="Generated by Gradle"/>
+      <component group="org.signal" name="ringrtc-android" version="2.48.1">
+         <artifact name="ringrtc-android-2.48.1.aar">
+            <sha256 value="914b6df962c28b55f02bf29a6bf797f3b656c830968d1c6e01156d781d980abc" origin="Generated by Gradle"/>
          </artifact>
-         <artifact name="ringrtc-android-2.48.0.module">
-            <sha256 value="f02a95b09de16a2deea9ddb4d264a20872ee1b5d2d3cc8f59d43c6f43d3853c4" origin="Generated by Gradle"/>
+         <artifact name="ringrtc-android-2.48.1.module">
+            <sha256 value="325de3a77fd8eca5b1734bda3e39d6be25c4edfa8742a83d7745db6cde9e8ce7" origin="Generated by Gradle"/>
          </artifact>
       </component>
       <component group="org.signal" name="sqlcipher-android" version="4.6.0-S1">