CVE-2026-5507 Session Cache Restore — Arbitrary Free via Deserialized Pointer