OpenEXR: DWA Lossy Decoder Heap Out-of-Bounds Write (CVE-2026-34589) | HOL Guard CVE