{"id":"CVE-2026-103764","summary":"Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport","details":"Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size values using READ or WRITE opcodes to disclose KV cache contents, prompts and secrets or corrupt memory toward code execution.","modified":"2026-10-04T07:03:18.681443Z","published":"2026-10-01T23:19:57.849Z","database_specific":{"cna_assigner":"VulnCheck","cwe_ids":["CWE-822"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/103xxx/CVE-2026-103764.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/103xxx/CVE-2026-103764.json"},{"type":"ADVISORY","url":"https://github.com/kvcache-ai/Mooncake/releases/tag/v0.3.13"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103764"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/mooncake-transfer-engine-before-0.3.13-unauthenticated-arbitrary-memory-read-write-via-tcp-transport"},{"type":"REPORT","url":"https://github.com/kvcache-ai/Mooncake/issues/4441"},{"type":"FIX","url":"https://github.com/kvcache-ai/Mooncake/commit/a2933849417259e562fc9cbad63c618d464dfb2d"},{"type":"PACKAGE","url":"https://github.com/kvcache-ai/Mooncake"},{"type":"ARTICLE","url":"https://github.com/kvcache-ai/Mooncake/blob/6041a609a8c3af35e778f70db344f145c2914980/mooncake-transfer-engine/src/transport/tcp_transport/tcp_transport.cpp#L209"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/kvcache-ai/mooncake","events":[{"introduced":"0"},{"fixed":"e5598b0992cc258b06d22f24d875480e8931a28e"},{"fixed":"a2933849417259e562fc9cbad63c618d464dfb2d"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"0.3.13"}],"source":["DESCRIPTION","REFERENCES"]}}],"versions":["v0.3.12.post1","v0.3.11-rc1","v0.3.11.post1","v0.3.11","v0.3.10.post2","v0.3.10.post1","v0.3.10","v0.3.9","v0.3.8.post1","v0.3.8","v0.3.7.post2","v0.3.7.post1","v0.3.7","v0.3.6.post1","v0.3.6","v0.3.5","v0.3.4.post2","v0.3.4.post1","v0.3.4","v0.3.3.post2","v0.3.3.post1","v0.3.3","v0.3.2.post1","v0.3.2","v0.3.1","v0.3.0","v0.3.0-beta","v0.3.0-alpha","v0.2.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-103764.json","vanir_signatures_modified":"2026-10-04T07:03:18Z","vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["315778833985528433439193377079869854936","235417707729360426545935784894419912861","320976064982696335675655049371340800674","267366331805321219118744763566878765155","142537225077063135313522486719881920661","236385299608302027066365724364242153883","225313161135570269823558059122459305182","5367198523401805585254198697900443784","175385881945668068489509239624633790790","308082947919573613732848013968876622711","312603048851136296200986269840527103149","197819269461885933032427911915571849417","153799513547297191294668808334014046709","134322749382691546471004705977883510032","175990770850900169142606164274086374929","252012609159845411721497496923704647754","162773643561965434363328111648669022547","68382267013582036056346873176015568804","267911062193445748927713719956946220954","198504989428264119989123018372921182741","71887981254783690921124941109521442574","97014927335484407847906965529442396323","148201190131260092197756765416398002714","135986168271070426540622655543223390687","64860790182557216904056368046481186570","252635494671480372056755473070437953847","216293955565524687850959042683231497768","54474156215083825843320102397615426060","169989885145741472844935578100554174269","318314849047218028195110785603059966844","144660567751253835238735364992216086924","159036382182196359576631765879529877879","252339767538715312433132156425226244419","151974774585211519580899054194947925334","58393541737697487791176002078887509000","139502815649640698248435972550712869837","1201247278219574878869340364556519021","331682960965639699459471285133381832032","307531875336907709565194203677018296355","332959504599344464736969986766346624139","149492097702366279863524930445191373448","72867297920016113723332594512254992621","325546059875291268822394752984788242863","201271700958679998515107478059749490591","52935605989471671457847079544044780455","163345965936104697929325075894114939208","109336321077461274856785758811879508341","73487205199560525101411472083674035017","25130790492085934370992730604935910585","332179857411450945846539368484301953597","260054668646154907080854670952375822707","184062277565026561781837283982323370925","123901393605842410145594199308866260625","213752318158971336487948787064451954605","188952838543914166976370259307163436326","105685004665740781128482703520741658296","333512018683190887762396148367538139813"],"threshold":0.9},"id":"CVE-2026-103764-098ff3cb","signature_type":"Line","signature_version":"v1","source":"https://github.com/kvcache-ai/mooncake/commit/a2933849417259e562fc9cbad63c618d464dfb2d","target":{"file":"mooncake-transfer-engine/include/transport/tcp_transport/tcp_transport.h"}},{"deprecated":false,"digest":{"function_hash":"4895983950821932517524766421979034410","length":2327},"id":"CVE-2026-103764-10529a29","signature_type":"Function","signature_version":"v1","source":"https://github.com/kvcache-ai/mooncake/commit/a2933849417259e562fc9cbad63c618d464dfb2d","target":{"file":"mooncake-transfer-engine/src/transport/tcp_transport/tcp_transport.cpp","function":"TcpTransport::getConnection"}},{"deprecated":false,"digest":{"line_hashes":["290427492830953888048166612723098884621","332824309460981616287158443070725637844","171726667771117184715590814933765938198","103234784051663679038396853846763113255","8232174840085386866425217552231039567","298038390508769526754310467278108846268","80176630755931549844202284092895889217","124841388000005708391958320738749182330","17617119775310766003413177652972447826","119406242183186119268254219612405025114","256939494167758218776334803247413917507","189678916090829438322755584897381689663","265712175634623800599048891324312840710","132251386816342092863951600173828103794","114188518876013707654168317261597581486","218589347275005923670731891215356412147","58517181101166295498118508671729457554","262044883373234017550236201841500079420","32060944713356560535257374332120772543","295076399756940276830651035050744487336","147448073603986255526496883938847941741","325658333758538538555537050750896510326","93849291764921070826954821123817200340","168856833678186295597249912390900830385","20045163866504307171353658012050115483","80012063832504700528547759713717742222","251755627847556425949174237487789669378","135189680571785401395775033097360385033","153940146002155990416381080705128898376","136816996862487428115470721988779968704","325529554896930043020030061372501947302","48841230354726485023846642004690025096","93585666298752966752847407215627731670","106797584444388689230774599986707795085","329345545954326417489939434566261605443","212679099164855147521710608119302118920","107742642201722648462003463742919420691","269615372733332342750164919027203893747","203335203976114254618935371430980839825","81495051951363148620212621545782081209","79519320375908685400885722090295137559","63594076797870674540690402161321369981","285601532994560946591221552171067440594","222765590829486543308655071376051598137","290788255741744897570527856398453437217","277527725694257450230883491050952161350","216561206078263784855469778960586764530","223476293050399034196789450329356093765","161146773973884739267958598093945513236","50950502192188151862557861376079196634","203946200217340411778849588000806316611","213665927810031880217276686690031343642","321037157624099126385915092975065885203","174840580757467261425406577096583761006","309510280474581408503101557224768361784","36685531049071763539290528682214133984","335378687552819291560818088636370032061","13471312353598317825062116628584689809","160070376163210100219264638267503944989","258817557833252300682658849218612345093","123396319238036809646351314368438622963","125124170680128340316054688952710786811","15192302401146273957584607848022411569","249285132119369026197034523630316964885","295051803719353813105863511484495336628","306171983785164014090917096810743284998","117051264946815406911009692259602299057","159462431539661166768049333269385437170","294929597070566632668619217753350239718","285793907087988138251297248938894401862","232778276709737926031800727042808571130","144917201295083781618611121444701557256","223403831402609732325407369878320417140","151736332202389027778075147650581057380","123082830367812561255867898381446181725","196898116465610253959120300156234755625","128468204523242866602821238203293807111","180996502355618718731556368386306146560","157430810230131247102056361314698698323","228432747123305432671470083620117327467","143673522805320722099287395986800496287","27424962516297048724446694050958135595","114357932855746061916754732698455840158","110244852678670718083968329735994109020","242058593686584531821548510920618516849","23583430721357407633154049327913345115","223610124437014608548147882787719246799","49026356338709428573624936064596217300","178127897681282036920431907269992097899","118770798431181421377902816338174800676","90083152290017633296211737267628978965","313795528771899730449575618621204634378","331517670713693190051942327616293774928","74226706495877593010332335950056272938","339044559290046637707780618790136466345","230576817364332025252785967753322588210","288193942492983534610947313354665668575","114686484436764903827650390734628629435","251535738281302833306955920522267922862","132741774083198092386925134711487166671","16462684018369113548300526402620123865","170436292331129578371511100890327887955","262781382040493319605817812301951799580","56456182341843566890769312307991540471","267183538914156457984240130804815103047","169740068424314120250370130303176389619","29979745732932752879025214937065715663","84363029439025482198493001676914073974","221185450902630142993597968110929391596","134808846474777973707563775204471046014","260773273858518278349047672591308475136","295280761797276140173786955471775817518","151189127188481903050513489694854508630","177437157551850299568951026138952048235","99121882059162738914269814229218761290","175424281062673262790290183541425855059","47768221823391178730053347410991239447","137619348420885438864857623403848118944","74146496748443140121446752474230035919","93539720543460471696839051939491256747","76087366626508465829555306613130296928","84674298308393093367426337852967217173","189416608292905957261396097661021440384","238862391568426978847443824166680336448","171403763361386641277796230380892282655","102625634210948203022610503454085317785","46886559888536932901732301976671557989","305749537687122600867514562609094605572","52761124993556705639706668024198365962","158070820997348525101286199470324260406","147146968568477205903368146404094105826","312655670579390192081436237532882696701","89695020453086058543327249322384587618","183818127537159862574661390339170465289","181930494779617528385621735489691735043","327035754983033973023733127355444664374","235507069048400608112837042927032756183","157984529872225442347919703427603469983","141240622915701693495869263363779950406","33152236665844942248861379114332690778","147062943226527649879019879330022853217","70088427374255922611977664102334560608","314051185258488360475119074427203408430","205830289053259130036882231127299033306","284263990170381369530084329076147416570","179383047633021020591694951193227443800","234058933612820758301863371917098232035","184705236292205692275051271140553392968","93216901396949034491193240167847091674","60900443642652825081890087558168603252","104325774949517784343407030826966021511","229100326443775112802379739335689697159","236831814315487630561346325142945799548","290860789648505496030227603064836720814","203695152321253828601700461446382237190","127345178329004012999616300779834171978","300535404793896966443958103000620515819","302324010268144114756892022256222567984","49044593417078579622071676414824280263","110031507932076382648273551384735996765","236028785295497778129115155437710669538","37212539309291602510428308496246369805","193155267882483265619975934685004337391","320628309972041734402567983575630278890","295823240425793615169333486224883665806","102036811602071717654083952048313417586","124188501930255570081108101940419568226","216592357822940715163194381582334591480","113761494408593609304420064496272943514","278036311425980939422027475048468389119","141293332905424873095005174733923808792","122307631129543902059672886300070828025","144442970678396815494509238670385267277","76494095879813516209088390314763676432","331036950888853440520620720265892326729","107888900133839237812096548616210266129","91239323605638583117688621876313401810","161799578226884222237513211981458883238","207219939159008945024502686465663133234","162618442065088095565769504307362618111","4774683427315086852277379021408478138","62357852336336074997360859395018549380","8471041943869844487361169911357304622","73196973134307544635006360118204009264","96183058599860891902518585749852469533","277195511119080301727721556622887418370","46888332100177833106492888457354676354","174841218878447476340619561883938583372","295774698325699284984460941015173270643","21200225183425778170141291946364123719","339087369764396488129207664616719227599","75355304644364892678761933093632882653","296281925292568241573525082406886684273","232901171068200253174849161816590250090","283956781588054391955062285603338752865","96829496661327567975588337769274319173","105554213496943304360313477800741294939","87287947597397541027259797948809993592","135535219586126108653996307156329629766","38791122757886597588236008786879652139","159594743716558170698793971677927868185","301497860429291120224340108617202042716","186766387182974480500141228207061025211","176395069773907601058188516947853643496","171795125146039527068937243589300924817","333284364980943180109815966982301957495","266924893076611723624340514704826854086","284685232945104005292601876518284846389","326487942185993313433663253794129106853","335967318101508406298046302469335860770","198673668019600416622587501199148422225","67145239312809910868680449481706442815","290860789648505496030227603064836720814","203695152321253828601700461446382237190","127345178329004012999616300779834171978","156431155220595758864290267193108223511","142355982906867244312770051092202163666","245456900696528412438983848299184522716","97587527701519023403675331519152772919","265887122174808567687444977266158792983","156418685490515729629766623335294581507","310947862740211319045723366898869591263","26248279858706122983919291635513520894","236028785295497778129115155437710669538","37212539309291602510428308496246369805","193155267882483265619975934685004337391","320628309972041734402567983575630278890","295823240425793615169333486224883665806","102036811602071717654083952048313417586","124188501930255570081108101940419568226","336347313973516201948163298619926242527","125077207055533422692578738510603747733","25717617682856569425578276511314164622","157795267722431084944504828756335801774","35161404001604236642971623184798558686","91155936282303162416848224076103918274","54012423479521313619643286520594962984","428887390112690147970323874167677115","110779656366623736832456017171106142974","106201298292919624206852170659179791091","271101351744286892085121367038802754679","62914613673602123702623066844848262671","193349587603467621111249470854799397842","37641458275201817041262616690261214458","126556637246744020235910351256109987988","79338320735108955583607541673257022343","102085455639404178427297475519416453852","155601359070761097776582085111253670467","273171622752732502350736832556011929164","210353966138418022389857673654572222817","172495407771103225090752644974849519823","115102677154225475832327831571082164700","75355304644364892678761933093632882653","115854365910351695849649261936646835802","17558499106474322453730815562983037598","59732411435870104719798700177772827762","168954185410241205456215036832703847159","280384050380060937181224124511303396740","38956018997980048435911028532617462062","210213130257209299778882128104553178803","167952458086791182691854353626784494420","284273023248499611128889733005725190253","254240849619425914172059742982804460448","314531904843454089449641275556716145979","10650907322809920804550095407595822864","44745272448413440060042416599033349411","246586700334820533562654469457066171963","285697328575167948794507672326141652184","112076211297296724911647173214378525680","62357852336336074997360859395018549380","295986680317709533420508950983596056777","307351563905349981221866394372358123085","213346040148370109340411191534156678644","22123077667411783611814460750222337938","154764220997431422762240106477257247037","160736856183859888944719808074406330033","293595920341901478829765200944364965041","330438959310474761973263052047252131758","16535198884099270036643294721560181998","273169427237220197885733129947877603139","227095768199590501406870172097771344751","206618276956265705369876187221612150556","98479215144716270477272454722466984433","114087585927273008241661615535649953590","237057848393997890818519796185433571380","178252864108741463884534264051740720361","171253218392492278747833844818635533792","335110999711387821116360419747340338549","320395206239437923785297154497403608857","190439486365512010555630085566265435988","124706165708308495289806033782076624821","242113878777369866183796035036516036925","98349289431317413271683900531179684227","196135693144949626846177827198349549902","231121819190748700980738551208222259821","12631321345918595385862787176993459369","229431733824196572253284907085626519201","301129280714767224071293524805898922227","108196334225062100265084252935801645494","277500416919233178255234834143532798865","326023245318824332976507942291265579186","56914274310925495762880096803906317488","112262094369059561234801558387731843584","289109205202971369884149777278928610879","113765035143860197168359886031499572056","227413033917382588027204296652651853720","243143137807635764231279406354428385718","182615494881871330918618167634336585864","282684951271899986669666138810631179085","99496062058124313680571038006045740073","88579968857636571165260752720710627013","334593455152348685883369003097298157996","10881684432743658537473151668939743469","23599720558313374323216381467500275171","53641235625426381801448870589797392586","142081314378321680578147983841962091979","307265953955357529817709151036114183941","247578107914116685506433741332654376184","111258698645773067083000342056169555355","141889041876504229477057619096426642413","296996844033793368014573860454645946980","268640043500110355532851562532591796427","305270684435687228691545880870850531147","112179969525756168180368633161025843317","294968671721208890158948493662391220934","108457301987124233858215425763916480870","53785970625053792831878503882113629454","302573725200568528014086531698835144699","36848917388244710036522056525916635731","248427467053421721651592734071125759897","37794310821374982938145099637458650597","338266791013152160766748641942543801803","193577149821386976961152580432791358704","67068283415352477340999830536056663545","193466593405151998713368234132838837808","207786854699428655053611618171238501989","68256946330258380111966552929049519535","218836369615459277707406148807370808869","267299839967837148077092669227476813362","63348213872806624403063297852781641025","123638925525727777831796425835016361244","330119142230867349828405339346564880729","333721530879457203105239903580239539577","23715353262953787517091220981720664268","188994556295064897593042542849561307526","255720607519108867477399303663841601531","92984769076162078719133041425094037781","13181945201633004778564457911751228957","139994401447202515172998851251797271520","299447678375852747415661883398027376363","244415806327712222772060676826214528935","157543807036918657864308648690017087223","229384746743632367529394034273366202661","131762701438344550510785902526634058388","255917380317578398393858875938204607156","86481005627598243968561319272629657638","319504934668649686896391467416270098547","223700915771253103194353191462317491913","307838202230063771921976477217874227207","78820715961452292808592524330598774240","251617266213819313049584766718317720109","337115082385215820131999408564092039193","158379639534392351087242856365745658666","308639059207890756886069427468796543748","199883230546652284273416000803987473290","213941577648589136563761991458556963695","258210793773308887604856314625075753625","208182228873027901015854018636057559707","318502770788553199939522953679774969993","320527826389505588240617313404108423514","39116261508222857910251309809893141418","202889377164924155628831404444446569890","333176014026474655192707820821325204526","269270597707332156366800359988126113035","217011428904973324554847785632679410324","281642751493113326789215080687206573770","271731891955502976582549910833029148787","20436565752750597149602286430122688556","220972370835990964678720597621082357092","285107504789867220454990647205901798855","159396472849354220117900743980886037016","308348647720680529479984203840189417710","210910099724328759048502129721760466599","225486446207529533591688794627830183722","326196300067309346835682036681262163878","30000860092178243320400658607205835193","276332569121876072457990340278156280084","207764254467372760509081729703171098706","324209387928646892020962113563264042578","312539074082039876087889990178093711771","339316418873172177236736274466030472091","316962696496100916331073493045467258033","120624755504246618820362921086962703032","2815328898710503754937569871552699790","255161607424636810400576837344155247517","222887842664562342328326419674988141840","59632469731434368412265390378048196512","219635948530384447035951705109899707685","292213959510698976304000775534541616841","209590030327316473984936186449726417887","7426673529981599493090259864398383724","79838646863566637985880254376495519801","272674790822777639799178013906771522264","310724776014117992633250003760524701824","122333382393441291557710609736701453553","135496398872964645139342718017248288580","59975524373050382705346934281520549871","158285906966546776306012361184362069511","94389506793089540472708281925831375182","332791103596359661003745701894837794238","265183185483313724782104546892891278874","275323536110958964997747486338672395463","212665738225645271748683904863626116459","243742133148482219998931585072282183910","246261590752439137608326080034035084414","336473436963119168971445330190460195797","85943732693283544014797419352473513376","196392133340403366143683303372602858922","317744602449089334186950880889567452626","339316418873172177236736274466030472091","316962696496100916331073493045467258033","276574070110536767018612397465711697014","241040928047300206786000257879214842241","151639548416678702644583728776419400174","24015475183283684568409706447848740128","257606210670766340987383515415713889228","149288650515272718317102395616749460920","157801125150918630417471828421571657429","64873246277582702167644659813789292990","172109201906731189180117456679600252979","209590030327316473984936186449726417887","91694206412149930418417309643105796319","112183302478375891571378591248752367389","302334665084538829083883981477287096732","309006394952265393543995182622627945693","255966655283449946728274118425332140194","296779664030850703394028295146500389103","298006014035542095798599290380242090551","284032688333508239832435634101772874525","94193072630787826454081673179231394790","727091430579744173606314094970697246","117227207147092304560283881087774427793","6774284695112984391297807678939841259","323964429425680203853494221886304595751","221677054385641356439326224400422769909","270280444306799635139636841163635289849","42565873541322211665510382597249698662","158761161197912503713727250515744680370","339254070600721231622477181066817558937","162275759960373660364516568931832075632","335967318101508406298046302469335860770","198673668019600416622587501199148422225","67145239312809910868680449481706442815","290860789648505496030227603064836720814","203695152321253828601700461446382237190","127345178329004012999616300779834171978","140790851459950650847890889629478478051","118594895334843104788504127040094797250","3097686765212829035374713725391604327","337278645224151791353175504131045592889","236028785295497778129115155437710669538","37212539309291602510428308496246369805","193155267882483265619975934685004337391","320628309972041734402567983575630278890","295823240425793615169333486224883665806","102036811602071717654083952048313417586","124188501930255570081108101940419568226","336347313973516201948163298619926242527","125077207055533422692578738510603747733","25717617682856569425578276511314164622","157795267722431084944504828756335801774","35161404001604236642971623184798558686","91155936282303162416848224076103918274","54012423479521313619643286520594962984","170917239582601117248862006650238021460","93457854136008400996771614990126737183","34450895818569036820502889441548926163","205095433278557341648545233121045056641","2570977701313156284487965913816590398","62686800401400104451448709610414249928","178106763645287157318137688913140499791","147550552560475461668883821109735454289","160045099038726362091810397290638119396","282692062170598409258935889687451563886","150841154583583336672531751705599697906","115041684322631443551882570516745793570","242355204319710420769521123363381888507","317876835448620950318221055701724565631","305767029380455474232293381861287138676","172495407771103225090752644974849519823","115102677154225475832327831571082164700","75355304644364892678761933093632882653","115854365910351695849649261936646835802","17558499106474322453730815562983037598","59732411435870104719798700177772827762","168954185410241205456215036832703847159","280384050380060937181224124511303396740","38956018997980048435911028532617462062","210213130257209299778882128104553178803","167952458086791182691854353626784494420","284273023248499611128889733005725190253","254240849619425914172059742982804460448","314531904843454089449641275556716145979","10650907322809920804550095407595822864","103450731116297262920538300451035706332","40690597865942264316484834323433666328","329045991169492972785527608932694817334","154421199985662061054686389286295647801","190716042918484391213268187757382322022","241857797632655364601332133992733805903","292614632057895821546124073178087213697","307351563905349981221866394372358123085","213346040148370109340411191534156678644","22123077667411783611814460750222337938","154764220997431422762240106477257247037","160736856183859888944719808074406330033","293595920341901478829765200944364965041","8330659889845162545920828489383456536","104325774949517784343407030826966021511","229100326443775112802379739335689697159","236831814315487630561346325142945799548","290860789648505496030227603064836720814","203695152321253828601700461446382237190","127345178329004012999616300779834171978","156431155220595758864290267193108223511","34027167183459118783028765073626781308","118475141054377148447971646634445470400","287229751260786122734546383795251379795","334800609674733738462400203810212280741","105371106462038759760858039092901098907","213987433715569520532186554797603556025","282485574156262245956553270962404902838","232989107736379643716144841511310541158","7406112298552804158712310754551690947","50863731342513696705705846125460817458","238309085248528392718734926969330490183","242783850138781715426108234386407922927","321429533703493822677804834913348921759","257919215163085930016039636771589320519","295663244528330185713854192391908931224","26248279858706122983919291635513520894","236028785295497778129115155437710669538","37212539309291602510428308496246369805","193155267882483265619975934685004337391","320628309972041734402567983575630278890","295823240425793615169333486224883665806","102036811602071717654083952048313417586","124188501930255570081108101940419568226","216592357822940715163194381582334591480","113761494408593609304420064496272943514","278036311425980939422027475048468389119","141293332905424873095005174733923808792","122307631129543902059672886300070828025","144442970678396815494509238670385267277","76494095879813516209088390314763676432","331036950888853440520620720265892326729","107888900133839237812096548616210266129","91239323605638583117688621876313401810","115966856839842723009132816333711428288","239888077230587706130757974666666703357","150502431905399992801709565996071817125","242875847554774192072746145009453090008","31681083696213935611212316487655058508","173829424780254533074585562602169708410","159425081031102413987523969944024276411","73196973134307544635006360118204009264","114602185772242263925215022182367509135","142764057801906246949303822531420653436","96825077244679600197037230585866762165","53404467156189527978514096952356398175","174841218878447476340619561883938583372","195811451015085650053678055317088766337","302192102814406210637057116694073298391","320213970772882484496100806641997337412","321749498987253761031629925139048340505","200160440759464299595764339844732938351","90459663755456964647791324055472881540","78734309509733815074875135977775467729","69647030569246619183930562855282749601","169053758449768754862709429303338731937","283228710531456761521827353751924169711","301497860429291120224340108617202042716","27650501977066595429184254888911315357","262996439359953396285188878209120880915","69124220815600995646332574485144942062","117054393790127479623834009112377752371","229149868935224638214050878539783502496","286456238121183519165443796118143488876","334800609674733738462400203810212280741","253857062397413568448018291194114027937","333284364980943180109815966982301957495","266924893076611723624340514704826854086","284685232945104005292601876518284846389","49053615024266928953533218402322352379","80904056714798679855253496035449275645","246774100626243061149333961304392785017","223241044352164446147995695796074928173","306778771525005251354266170678909495321","125419717578714388150290803826203766560","234525925397281243572697202562495213166","304730493327900682352749763724801180719","132178184267703224284031470435459630426","206478857100518319771716155770302923845","168981381771245156102214365238032146492","185989808260095694656429741867094889123","87308507928045148591749423421945328030","73041047451543097491381542003385130492","129585790469990199063805109903016289164","290648649357309374553069073254669356463","3999120557939185991271258572215630279","200291706359239367800499680163097009682","151093300722618382729835776288268690509","241921065243463004258986344611232725480","157698475160024712631163360369213192916","243297796478947726819470775822459001791","215859207457751820923631567451772251846","79614469920215143913985217989807042593","100740299909634909179410095278702181522","326334398604340690083912224094168287391","21100907212270615021201645536559973874","328824652913077736763525677912754042099","134299693741252909919992720576113034783","274912617447489413931120988165049663185","49499102745072131795591712543964229086","182984039647226917239168898706219865235","46778084110913069219296827716325860277","3156991176739309903539382469261062483","287912670069515950151587745578185398325","71507374029461667782307039532880204307","55135214882719427716662087714842293624","207649154735605768564998792144048760640","188569819833997889408783237781784575946","116647833603341296917223454290747909729","200572023183511768257715265678171088931","64351239308037835054000340796315094230","98409788852468530658310246107713581496","63504477871542415467798592449868754499","157538529124678664199733092826830550595","272611006810887730811295376785738718517","248585025848057089173308039029598667609","60973384659576528113432277069563010888","111715467584339564749657836382620008335","326589222845221834768811677974548535474","69833747782204766285823258515206238533","104581371561734047674920733313867684582","365600183040284570207684069563466086","98007261726750480629949863319809348274","187415701849400212838261191301243870140","209006187393552774123127814559770037592","90741642044008724919716813633654640102","277501804066004579773595870759344262797","181784631905947920163907533752890732751","332794568859460521163242396001746004875","81195877823290402311832641552575264841","258870227189751755864826904246071826717","148120325108140768654773194936599402552","30170680113820019295832740577007616874","104656614312730867531078843579118561421","105833112718450725840786605739660139311","207929681415417823453244245963281006143","87852549446814012952454429571163705592","330483499460608134411771691460145846301","236896028531153070604232412890626219908","40995612239401254660125298156772037298","50418807011255386567829046006326762968","242252091316481384380607193214185214767","22142198445449651015013127187514668692","165078036919468592918406883529119243991","81250224720143347339583274894874959837","172266228510181246838936309276594079159","67055364194265209036075390958312497282","283391945461831275037227036184348868665","209517605776628740419306393172515114021","8592654417470825079437963396392823829","281848613219644227352002826169103659626","72908576720315023915631114696124161523","193306466622116828152203979877820007848","137665463839858449589035379664191026539","101390017657018915470106594354575031674","250476842682231400071715172897783277422","60054642408991512673393873541579351738","78059449281495407730590417996999679003","5188709033081475588970753208737045374","75863777119798363779429407940008323006","250768198409231228394193991441186009305","42383369872392188414963846270742389859","196185215071795600399820598089494219061","107076545399158675973451589701346264522","72053492258145334142037910654721159271","60816573888501582286215944650239462028","167237929844419188966800358137196609058","164913975117951926479569117769102788455","262772447889849448725662213371348043359","48837402746755511390572370226690573768","295435233150709808291289069045436443406","186295600605294693332899271106993475914","140071242045940205157147111744033764567","297854122559574358254645898774567276037","3588316480276159890946759680064293323","241799317116044576106400080944834507408","156200663379266207006049098902093293725","98149647146941685176719088774610841702","25203115238662637731437592084254289719","259076023341917956697926314954114501677","98610625270882994408158154027613152840","238371986931910633288153999487917933944","233034519882443061996317264398475065552","54059610593521221770271883807242830580","263184131637506132236163819757324284768","34269756201128805734525635428126439833","157403675060015567152233827134412178924","285907367532844877455154814023291580210","199383446876391192770059914211515172935","241572829787247860226770841118694881819","45384300333237304717889708065042220405","226114403053131533115702442466535693378","260826067369902029492441348112061034119","24687147723355175172071855615858168335","102798791251473908993835497495095091203","332793660787398956061830147212278285407","111893772472653279024034437220267131468","209737138480451746983933157392830059105","142322508815426516323317631417628257303","275822427569391137180600448159435146094","90079971073054813147809791644228248440","81549581495363717764192206233719043139","4988219550176122984243701991005107293","116114523575410392808953963173371455714","101547748893615838565303457195988016094","2215250749229239166462242698823305836","231136641568799895796878751605475585112","224588876131747259969456151100076128108","91621948945661869901086770800624502147","218823330551945179170640967329240297555","109555207524673285239205731248692706455","297854122559574358254645898774567276037","3588316480276159890946759680064293323","241799317116044576106400080944834507408","235244121078694890258130417847631413063","278569642138909053819050512642865916723","312779889037416999634382908955486355043","19961294014781324066079525816466921695","236542820006018801698606039273487892078","55132383778397753433667484075634847266","196356771052649600058448084842361422667","147318177431257734247941639747020617208","1464438974839029131862670380356737469","293162320054589800640138315234184682202","44452269827434418855555801152058603533","104169214494926661545041563445714813094","256015823723471445623943413828463951627","172267724095807893894320821792452200857","218629258026777427620376347421015445640","274777232074256889811223642480027285923","23637214586994160446506322477921748267","301576548470632018908809175414363282505","109783293633527314979536077025122195863","102994478238085041470331402596247013213","196252687566430407290273979326696284329","158698035529436668697488471001707917366","164663822082481160861480255321212465973","272509431731012719730366335907046982994","88720396464826112185750964017347449314","19628784807126347627683685356328597000","191198603211463371045686180312893169023","158565303012343735114248580012719003533","143353372138189024442793128774186419086","90461473398294504320532790075233185741","194890145138506355386321102940271513568","193391784728447709843337211431545542635","318679371863376978514088058114903559766","78971305983042105781409264202246730054","118368738533529207096000164957822111528","296568024282320200778685965850378857536","24868760778192308165659073964432049013","277885381484777436500923582780224554722","232676316880780884343947197505578484692","210970647024931410295177236523325314805","293949540968280903538352693917672011553","48026157648400920417310989861386528035","211039017294157702756601026315301967098","142497988901119974970088004641162836589","148814742283097212521394839355023424462","306393037534652508832278024844181897705","206077969794236347217070120171299040827","273638521820099058343425547400148224439","21839326242724729374666807638807475974","215600951317143095265519609020616780081","59248374565972748011643942712044475943","228525992014823409045881285445030932027","335997136974170206095827329162448943598","72316988938868844661848106874146670238","312359265916713061554144214072149951434","25247360534392125914865622238534979503","286873703317283983157658057794578696859","212193991318713466036139071655816069640","323749958901239877000785051382527919531","203165127119014148392983496195841773992","239385139289746672884041818846703817827","117919658214736238103274047795093006866","73153499475547853557707574633733988770","239834729539084300656061928289532252839","219268772501865004117966484249658112530","248600409173705947828998393954746841773","335708196132971586481291623987627983001","201995922623462657040547433494996467098","135463413659528515066112998143844758008","34373352047537550365250277974955346181","72861235786878153382273320154837445431","32797257549642797947203915004832947778","179020178076374786613572491796102979771","32288621302197590825313859684843729637","49041768712932534246785534199263231497","7971893409951697522998332056395261692","312672704508605601398598862269242877839","41296498838486410848999556309080530978","87177918597730416414528120167442121186","181529746740606403321794828296244748118","135739298405372067709992799780225384874","608887304760513771862134788222400108","59014586052830534389130712527136900370","310445718717485912983008501935896073076","327860082909266542358548233132585985368","337492274816944644818449759510036646575","119258988697698457769296765622298402469","229020379934398976061914864629355551810","226040609378833812063184777352814084523","172233787233298419818272489849967698627","112479006832263300662129010815208189085","164971905257941344883150783686562759208","212012092522064948110515673609816709797","148814742283097212521394839355023424462","162479141460452036880342220511367506746","209893282839321795364110916081117891120","324266687175812054764669104722766352155","96352396585734271303878769489357422472","200890291855187132344242708504677594463","30055785462565690933178017185006730604","162571754868353660006179295917388056281","322953087182935132261272074551877301472","80680242077952099635628898520659424906","147648223520706005199508150863148062417","290522284734510203321979510799129298007","300361772991682353239784336824676282080","228932032745271328574774473894605873082","222324146046933868079167113657856640794","284786867772791107280968934204930838737","162046361094124107924855191218889528037","269634796529070918425231752070286551941","44408214347411287321366960274045985576","191108644039706345288456797110571267349","168614400477109292819229219116068824871","7043076933013624317932649687592027931","259344429429374374868348928665269190963","286294942063473353742995183805477591589","254098772609175704514142175233129275513","23469118859851666801586072059235329089","299193487026979914208359813606978574763","321931449385067968216278945038459443264","297280150227904935571948242595939826050","287359075913838920724295241175090000669","6580810482273159951572779919719149625","313218077757892890238696280072400394097","105475228201237819997010767032680901099","140421096161479945227493372899725777536","193082357913627015923806077879550836200","198319347310999833230637992869227559349","134321340145738640865877431396657258684","88800448135838849010969888360897072544","151844999848337760377037388394199848781","99992962067040181373514260231836436874","291707399241998205660350050957769834309","324328610686514026045778290519515513019","301730975577154810114726233436216789045","72389685887101319284995706266882888513","321562510989430241871277896678173033897","334244359755730006821597154313923680634","218670899564885010095125435181156138459","251404172958671112041020674812809338771","56794833288385327776928559734178117329","293762513464946165102948372623620545767","137512883243326904479465786431207346724","256692457758891807067163947838804862460","68021701577705676922895600030607124833","165717812781477618860892050977569564087","27816583752212590314779115113221566242","327487011264171024179477831705242801998","208581123254210746063066453550204259654","210672414983564556480682433966273135755","248632320422835718026809231646040977062","184038438738775090961630900389550493230","276233003065889718471329772863598930819","313982165749311412815130881723644017013","148814742283097212521394839355023424462","99524776713502448118121589968569755997","332515071169075304009146902948696885336","55802623553394032042700005730197477986","5487439196082936556606701759117126274","91309741469859518573300176997214804983","259106295045973641388478522995528058510","269138581230678645083576474658321223961","258737795810718116302786591853650790023","333483945845449310766158571323802610574","149427247351375278313020178579530850296","320604635961931335316777552287572789340","257418413753630185066681097031804446151","220803940987250704142386213421576171048","69835816026520782220838206858921334231","216871057035326891875750337488815626378","53836100687243142868066635845980791737"],"threshold":0.9},"id":"CVE-2026-103764-2f7d543d","signature_type":"Line","signature_version":"v1","source":"https://github.com/kvcache-ai/mooncake/commit/a2933849417259e562fc9cbad63c618d464dfb2d","target":{"file":"mooncake-transfer-engine/src/transport/tcp_transport/tcp_transport.cpp"}},{"signature_version":"v1","source":"https://github.com/kvcache-ai/mooncake/commit/a2933849417259e562fc9cbad63c618d464dfb2d","target":{"file":"mooncake-transfer-engine/src/transport/tcp_transport/tcp_transport.cpp","function":"isCudaMemory"},"deprecated":false,"digest":{"function_hash":"173133777672582911643126579122821538819","length":181},"id":"CVE-2026-103764-560a0d57","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"87758707853235324473277220961820622886","length":345},"id":"CVE-2026-103764-6534910a","signature_type":"Function","signature_version":"v1","source":"https://github.com/kvcache-ai/mooncake/commit/a2933849417259e562fc9cbad63c618d464dfb2d","target":{"file":"mooncake-transfer-engine/src/transport/tcp_transport/tcp_transport.cpp","function":"TcpTransport::~TcpTransport"}},{"id":"CVE-2026-103764-689d6eb6","signature_type":"Function","signature_version":"v1","source":"https://github.com/kvcache-ai/mooncake/commit/a2933849417259e562fc9cbad63c618d464dfb2d","target":{"file":"mooncake-transfer-engine/src/transport/tcp_transport/tcp_transport.cpp","function":"TcpTransport::cleanupIdleConnections"},"deprecated":false,"digest":{"function_hash":"125752120434187620182428068412719432381","length":743}},{"source":"https://github.com/kvcache-ai/mooncake/commit/a2933849417259e562fc9cbad63c618d464dfb2d","target":{"file":"mooncake-transfer-engine/src/transport/tcp_transport/tcp_transport.cpp","function":"TcpTransport::startTransferSequence"},"deprecated":false,"digest":{"function_hash":"246725966072224160910668570000416404474","length":801},"id":"CVE-2026-103764-704cc471","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/kvcache-ai/mooncake/commit/a2933849417259e562fc9cbad63c618d464dfb2d","target":{"file":"mooncake-transfer-engine/tests/tcp_write_visibility_test.cpp","function":"TEST"},"deprecated":false,"digest":{"function_hash":"29985236396673803394380540006615276277","length":1321},"id":"CVE-2026-103764-7158b201"},{"deprecated":false,"digest":{"function_hash":"318149493716345644707446906013333207977","length":480},"id":"CVE-2026-103764-7eae8e01","signature_type":"Function","signature_version":"v1","source":"https://github.com/kvcache-ai/mooncake/commit/a2933849417259e562fc9cbad63c618d464dfb2d","target":{"file":"mooncake-transfer-engine/src/transport/tcp_transport/tcp_transport.cpp","function":"TcpTransport::TcpTransport"}},{"source":"https://github.com/kvcache-ai/mooncake/commit/a2933849417259e562fc9cbad63c618d464dfb2d","target":{"file":"mooncake-transfer-engine/src/transport/tcp_transport/tcp_transport.cpp","function":"TcpTransport::install"},"deprecated":false,"digest":{"length":1079,"function_hash":"219303050692010800099088374688053849010"},"id":"CVE-2026-103764-88df8ed7","signature_type":"Function","signature_version":"v1"},{"digest":{"line_hashes":["28012169323049661981657962746774041051","144746046095091266687846414691134242196","229741516535280686845348300345819994907","306264367957166076485521241348618080317","190370667836345941557657937571887511987","16068838376383560967331945395227627968","273403131474054668939211499174622738642","329263188846999448018996840553965581472","145239995353140843619596013790905272222","181777760633998692696004498929495440503","73347631373151733942491661113383583361","15616265897005730850295806863508230435","339453091095627049537687055839065718839","50882469140268530793516353370683892574","10370227010875319155043817744464657787","291523011744616943920298377969114539113","269338509330427831957275923267340617878","230980659109948870586808138229446751440","143750444604782292284878587624699066652","272784334724087461689737761550672865981","306884701482451466842397124947506889991","275696401924814769779247256466090857420","136539735164800210379287222320403575520","291826935436422158379051113962725011329","102584513481898525201944423778497174420","166388096073283220474603964514321920420","249836032686487172799897937017094458916","63021709992043626224179303412435545079","262867422621275826067657811687633289936","298637786914480273565213714324663720719","14292174155816721849467326745310555709","21875385945667110157139592802502040060","170921375754296836266759889263501770975"],"threshold":0.9},"id":"CVE-2026-103764-8fd4777a","signature_type":"Line","signature_version":"v1","source":"https://github.com/kvcache-ai/mooncake/commit/a2933849417259e562fc9cbad63c618d464dfb2d","target":{"file":"mooncake-transfer-engine/tests/tcp_write_visibility_test.cpp"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"90282425070791966645389774502680166272","length":480},"id":"CVE-2026-103764-9c3f8945","signature_type":"Function","signature_version":"v1","source":"https://github.com/kvcache-ai/mooncake/commit/a2933849417259e562fc9cbad63c618d464dfb2d","target":{"file":"mooncake-transfer-engine/src/transport/tcp_transport/tcp_transport.cpp","function":"TcpTransport::validateAddress"}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}]}