diasurgical DevilutionX

• CVE-2026-116842 Medium 6.1 DevilutionX 1.4.0 through 1.5.5 Heap Buffer Overflow via libmpq__archive_dup 0.1%
• CVE-2026-116841 Medium 5.5 DevilutionX 1.4.0 through 1.5.5 Out-of-Bounds Read via libmpq Hash Table Lookup 0.1%