Freedesktop Poppler SplashClip.cc clipToPath integer overflow (CVE-2026-102621) | HOL Guard CVE