The vulnerability in HDF5 occurs due to inconsistent metadata in array datatypes within HDF5 files. Specifically, if the full size of the datatype (`dt->shared->size`), the number of elements (`dt->shared->u.array.nelem`), and the element size (`dt->shared->parent->shared->size`) do not satisfy the expected relationship (element size multiplied by number of elements equals full size), an out-of-bounds read can be triggered. This condition can only be met if a malicious actor has altered the file to corrupt these values. The vulnerability is identified as CWE-125 (Out-of-bounds Read) and has a CVSS 4.0 base score of 5.9, indicating medium severity. There is no known exploit in the wild and no vendor-provided patch or remediation level at this time.

An attacker who can supply a maliciously crafted HDF5 file with corrupted array datatype metadata may cause the hdf5 library to perform out-of-bounds reads. This could potentially lead to information disclosure or application crashes depending on how the library is used. However, this vulnerability requires a maliciously altered file and does not affect normal files or usage scenarios. There are no reports of exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vulnerability requires maliciously crafted files, users should ensure that untrusted or unverified HDF5 files are not processed by vulnerable versions of the hdf5 library. Monitor vendor channels for updates or patches addressing this issue.