CVE-2026-4390CWE-119CWE-416

TeamSpeak 3 Server Connection State Management process_resend_queue use after free

Medium · published May 27, 2026

CVSS v4.0
5.3
EPSS
0%
Percentile
34.7
In the wild
Unconfirmed
What it is

A weakness has been identified in TeamSpeak 3 Server up to 3.13.7. This affects the function process_resend_queue of the component Connection State Management. This manipulation causes use after free. The attack may be initiated remotely. Upgrading to version 3.13.8 is able to mitigate this issue. The affected component should be upgraded.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
EPSS
0.00415 · 34.7th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-416 · Use After Free
Published
2026-05-27T16:30Z
EPSS history
Timeline
  • 27 MAY 16:30Z
    TeamSpeak 3 Server Connection State Management process_resend_queue use after free
    cvelistv5