heap-overflow 1 Same Workflow, New Target: AI-Assisted Discovery of CVE-2026-29004 in BusyBox May 5, 2026