CLSA-2025-1753729945 gstreamer1-plugins-bad-free: Fix of CVE-2025-3887

CVE-2025-3887: fix H265 slice header parsing to validate numlongtermpics and prevent stack overflow...