CAI Content Credentials | NULL Pointer Dereference (CWE-476) (CVE-2026-48438) | HOL Guard CVE