Mattermost doesn't validate the TIFF IFD offset in the image header before allocating memory (CVE-2026-5755) | HOL Guard CVE