Possible OOB reads and a possible buffer overflow

[winnieXY]

In #2364 I've submitted a small patch in order to fix three possible oob reads and a buffer overflow which could cause a device crash on a malicious advert.