Open Babel has NULL pointer dereference in CACAO CacaoFormat::SetHilderbrandt (CVE-2025-10999) | HOL Guard CVE