diff --git a/.changes/bump-flutter-webrtc-1.6.3 b/.changes/bump-flutter-webrtc-1.6.3
new file mode 100644
index 000000000..fa6bc5503
--- /dev/null
+++ b/.changes/bump-flutter-webrtc-1.6.3
@@ -0,0 +1 @@
+patch type="changed" "Bump flutter_webrtc to 1.6.3 and WebRTC-SDK to 150.7871.04. Windows and Linux can attach native video processors to local tracks, Linux screen share no longer hangs in getSources(), and the bundled TURN/TLS roots no longer include the compromised eMudhra cross-signed AAA Certificate Services root"
diff --git a/.changes/bump-livekit-ffi-0.13.2 b/.changes/bump-livekit-ffi-0.13.2
new file mode 100644
index 000000000..2665cef28
--- /dev/null
+++ b/.changes/bump-livekit-ffi-0.13.2
@@ -0,0 +1 @@
+patch type="changed" "Require livekit_ffi 0.13.2, whose libwebrtc no longer bundles the compromised eMudhra cross-signed AAA Certificate Services root"
diff --git a/android/build.gradle b/android/build.gradle
index 1df4a933d..97ee768b7 100644
--- a/android/build.gradle
+++ b/android/build.gradle
@@ -60,7 +60,7 @@ android {
     dependencies {
         testImplementation("org.jetbrains.kotlin:kotlin-test")
         testImplementation("org.mockito:mockito-core:5.0.0")
-        implementation 'io.github.webrtc-sdk:android:150.7871.01'
+        implementation 'io.github.webrtc-sdk:android:150.7871.04'
         implementation 'io.livekit:noise:2.0.0'
         // Audio device/focus/mode routing. Pinned to the same revision used by
         // the LiveKit Android SDK (AudioSwitchHandler).
diff --git a/ios/livekit_client.podspec b/ios/livekit_client.podspec
index 263acd984..d5e665b5a 100644
--- a/ios/livekit_client.podspec
+++ b/ios/livekit_client.podspec
@@ -16,6 +16,6 @@ Pod::Spec.new do |s|
   s.static_framework    = true
 
   s.dependency 'Flutter'
-  s.dependency 'WebRTC-SDK', '150.7871.01'
+  s.dependency 'WebRTC-SDK', '150.7871.04'
   s.dependency 'flutter_webrtc'
 end
diff --git a/macos/livekit_client.podspec b/macos/livekit_client.podspec
index f654fdf4c..070f95dc8 100644
--- a/macos/livekit_client.podspec
+++ b/macos/livekit_client.podspec
@@ -16,6 +16,6 @@ Pod::Spec.new do |s|
   s.static_framework    = true
 
   s.dependency 'FlutterMacOS'
-  s.dependency 'WebRTC-SDK', '150.7871.01'
+  s.dependency 'WebRTC-SDK', '150.7871.04'
   s.dependency 'flutter_webrtc'
 end
diff --git a/pubspec.lock b/pubspec.lock
index 8de48fd5f..bd89e4b8a 100644
--- a/pubspec.lock
+++ b/pubspec.lock
@@ -292,10 +292,10 @@ packages:
     dependency: "direct main"
     description:
       name: flutter_webrtc
-      sha256: ebf5ceef2897caae425ed65a38b2961c29d9d9a626159418ed460e1a65038c00
+      sha256: b98ef03376401e54ff87fc78907b38e562b15ca8424aba589c263eddc3c1ecf9
       url: "https://pub.dev"
     source: hosted
-    version: "1.6.2+hotfix.4"
+    version: "1.6.3"
   glob:
     dependency: transitive
     description:
@@ -444,10 +444,10 @@ packages:
     dependency: "direct main"
     description:
       name: livekit_ffi
-      sha256: "98aa7389ac511481617966f2e26e87a29be54e004a97dc2923ffd7af0883c5f2"
+      sha256: "38ff93b4cb83239d2a4f5a57fe2ea68bd7ff845d1682c4f2c14713b6af04850d"
       url: "https://pub.dev"
     source: hosted
-    version: "0.13.1"
+    version: "0.13.2"
   logger:
     dependency: transitive
     description:
diff --git a/pubspec.yaml b/pubspec.yaml
index f9c0de441..884b44740 100644
--- a/pubspec.yaml
+++ b/pubspec.yaml
@@ -54,12 +54,12 @@ dependencies:
   json_annotation: ^4.12.0
 
   # Fix version to avoid version conflicts between WebRTC-SDK pods, which both this package and flutter_webrtc depend on.
-  flutter_webrtc: 1.6.2+hotfix.4
+  flutter_webrtc: 1.6.3
   dart_webrtc: ^1.8.0
 
   # Rust core (livekit-ffi), delivered as a bundled cdylib via Native Assets.
   # Native platforms only, see lib/src/ffi/.
-  livekit_ffi: ^0.13.1
+  livekit_ffi: ^0.13.2
 
 dev_dependencies:
   flutter_test: