ImageMagick: Policy Bypass in DCM decoder could result in image with invalid dimensions (CVE-2026-49218) | HOL Guard CVE