CVE-2026-32740: Next.js RCE
fortbridge.co.uk
A returned-pixel leak, chosen-address write and memcpy GOT hijack turn the libheif grid overflow into RCE against a pinned PIE Next.js lab.