accel/qaic: tighten bounds checking in decode_message() (CVE-2023-53493) | HOL Guard CVE