NetSurf libnsbmp

• CVE-2026-111139 Medium 5.5 NetSurf libnsbmp through 0.1.7 Out-of-Bounds Read via bmp_decode_mask 0.1%
• CVE-2026-111138 Medium 5.5 NetSurf libnsbmp through 0.1.7 Out-of-Bounds Read in RLE8 and RLE4 Decoders 0.1%