An integer overflow tracked as CVE-2026-111585 could be used to execute arbitrary code on the viewer’s system.