CVE-2026-59184: Openexr Channel Row Oob Offsetcve-2026-59184-openexr-channel-row-oob-offset
TypedImageChannel::row() uses the origin-adjusted _base pointer instead of the backing buffer pointer, leading to out-of-bounds memory read/write for non-zero data window origins.