CVE-2025-9288 Missing type checks leading to hash rewind and passing on crafted data