thumbnail CVE-2024-12356