CVE-2025-40294 Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern()