[Bug 1187917] VUL-1: CVE-2020-36403: libhts: out-of-bounds write access in vcf_parse_format()