libjxl: Out-of-bounds write in grayscale color transformation when using LCMS2 (CVE-2026-1837) | HOL Guard CVE