Apache IoTDB C++ client: Out-of-bounds reads in C++ client TsBlock deserializer crash client process on malformed server data (CVE-2026-40454) | HOL Guard CVE