thumbnail Critical WebP bug: many apps, not just browsers, under threat