The vulnerability is a heap-buffer-overflow caused by an out-of-bounds read in the RDKit library's ParseV3000AtomProps function, which is part of the parsing logic for V3000 atom blocks. The issue was identified through OSS-Fuzz and results in a crash due to reading beyond allocated memory. The affected versions include those starting from the specified commit hash onward. No CVSS score or detailed impact metrics are provided, and no vendor advisory or patch information is available.

This vulnerability can cause application crashes due to heap-buffer-overflow reads when processing certain V3000 atom block data. While no known exploits are reported in the wild, such memory corruption issues could potentially be leveraged for denial of service or other memory corruption-based attacks depending on the application context.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider avoiding processing untrusted V3000 atom block data or apply additional input validation if possible.