stable-diffusion.cpp: Out-of-bounds reads in PyTorch checkpoint pickle opcode parsing (CVE-2026-47748) | HOL Guard CVE