Update src/main/java/com/netflix/imflibrary/st0377/header/StructuralMetadata.java

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Author: fschleich

src/main/java/com/netflix/imflibrary/st0377/header/StructuralMetadata.java

@@ -1069,6 +1069,11 @@ public static byte[] extractInstanceUid(byte[] valueBytes, Map<Integer, MXFUID>
                 if (localTag == instanceUidTag && length == 16) {
                     return provider.getBytes(16);
                 }
+                // Validate length before skipping to avoid reading past the end of valueBytes
+                if (length < 0 || numBytesRead + length > valueBytes.length) {
+                    // Malformed data; abort parsing
+                    return null;
+                }
                 provider.skipBytes(length);
                 numBytesRead += length;
             }