CVE-2025-23157 media: venus: hfi_parser: add check to avoid out of bound access