Skip to content
Threat Feed
Subscribe

Product

Transfer Engine (< 0.3.12)

1 brief RSS
critical advisory

Arbitrary Memory Access Vulnerability in Mooncake Transfer Engine

An untrusted pointer dereference vulnerability (CVE-2026-103764) in the Mooncake transfer engine allows unauthenticated attackers to perform arbitrary memory reads and writes, potentially leading to remote code execution.

transfer engine +1 vulnerability rce memory-corruption
2t 1c updated