Mooncake transfer engine versions prior to 0.3.12 contain an out-of-bounds read vulnerability in the readString function located in include/common.h. This vulnerability can be triggered remotely without authentication by sending a zero-length handshake frame to the handshake port, which listens on all interfaces. The attack causes the service to crash by terminating the hosting process, impacting services like the SGLang inference server. The CVSS 4.0 base score is 8.7, indicating high severity with network attack vector, no privileges or user interaction required, and high impact on availability.

Successful exploitation results in a denial-of-service condition by crashing the Mooncake service hosting process. This disrupts availability of the affected service, such as the SGLang inference server, but does not require authentication or user interaction. There is no indication of confidentiality or integrity impact.

A fixed version 0.3.12 or later should be applied to remediate this vulnerability. Since the affected versions are prior to 0.3.12, upgrading to 0.3.12 or newer will address the issue. No vendor advisory or patch link was provided, so verify patch availability from the vendor. Until patched, restricting access to the handshake port may mitigate exposure.