CVE-2026-4732 Out-of-bounds Read Overflow in tildearrow/furnace