An out-of-bounds read vulnerability exists in the Apache Arrow Rust 'arrow' crate affecting versions from 33.0.0 through 57.3.1, 58.4.0, 59.3.1, and 60.0.0. The flaw arises from improper validation of RunEndEncoded arrays in the ArrayData interface, which can lead to reading data beyond the bounds of the child values array. This issue is fixed in versions 57.3.2, 58.4.1, 59.3.2, and 60.1.0.