CVE-2026-1837 — A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another uninitialized unallocated region is copied to pixel d — CVE Database · The Intelligence Room