This vulnerability affects TrailDB 0.6 in the tdb_open function located in /src/tdb.c, specifically in the TOC Validation component. The flaw allows an attacker to cause an out-of-bounds read, which can be triggered remotely without user interaction. The vulnerability has a CVSS 4.0 base score of 5.1 (medium severity) and an exploit is publicly available. No official remediation or patch has been released by the vendor as of the publication date.

An attacker can remotely trigger an out-of-bounds read in TrailDB 0.6, potentially leading to information disclosure or application instability. The vulnerability does not require privileges or user interaction but has limited impact as indicated by the medium CVSS score. There is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or vendor response is available, users should consider mitigating exposure by restricting access to the vulnerable service or applying other environment-specific controls until a patch is released.