This vulnerability affects TrailDB 0.6 in the tdb_open function of /src/tdb.c, specifically in the TOC Validation component. The issue is an out-of-bounds read caused by improper validation or bounds checking. Remote attackers can exploit this flaw to read memory outside the intended buffer. The vulnerability was reported early but remains unpatched, and public exploit code exists.

The out-of-bounds read may allow remote attackers to access memory beyond intended boundaries, potentially leaking sensitive information. The CVSS 4.0 base score is 5.1 (medium severity), reflecting network attack vector, low attack complexity, and limited privileges required. There is no indication of privilege escalation or denial of service from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the project has not responded or released a fix, users should monitor official sources for updates. Until a fix is available, consider restricting network access to the vulnerable service or applying other environment-specific mitigations to reduce exposure.