Process termination via unchecked HDF5 dataset shape

Resource exhaustion in Keras 3.15.0 and earlier allows attackers to terminate model-loading processes via malicious .keras files. H5IOStore.getitem materializes an HDF5 dataset from its declared shape without comparing its in-memory size with stored bytes, permitting a tiny compressed or fill-only dataset to demand petabytes of memory. Exploitation requires a pipeline or user to load an untrusted model, and the resulting out-of-memory condition kills the loading process without reported data disclosure or modification.