Heap out-of-bounds read on crafted ELF: missing bounds check before memcpy

[consigcody94]

Found via code audit. arbextract.c:108. oem_md_off computed from header fields but never validated against hash_size before reading 12 bytes. Crafted ELF triggers heap over-read.