ESPHome vulnerable to denial-of-service via out-of-bounds check bypass in the API component