CVE-2026-4390
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
TeamSpeak 3 Server Connection State Management process_resend_queue use after free
A weakness has been identified in TeamSpeak 3 Server up to 3.13.7. This affects the function process_resend_queue of the component Connection State Management. This manipulation causes use after free. The attack may be initiated remotely. Upgrading to version 3.13.8 is able to mitigate this issue. The affected component should be upgraded.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
TeamSpeak 3 Server
- Vendor
- n/a
- Product
- TeamSpeak 3 Server
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 3.13.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.13.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.13.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.13.3 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.13.4 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.13.5 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.13.6 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.13.7 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.13.8 | unaffected | Unavailable | Unavailable | Unavailable | None listed |