In the NAS message handler, improper validation of the length field in NAS message causes memory corruption