[SECURITY] Missing lower-bound validation on CCSDS Length field in SB transmit path enables 32 KiB heap exfiltration via 8-byte UDP datagram (TO_LAB downlink)