PostgreSQL ascii() function reads past end of buffer (CVE-2026-18024) | HOL Guard CVE