[DF-1296] UvdLevel[8] (entry=16 bytes), VceLevel[8] adjacent
[DF-1296] attacker VBIOS UVD numEntries=40 (max array=8)
[DF-1296] BUG CONFIRMED: loop wrote UvdLevel[0..39] but only UvdLevel[0..7] exists -> 32 entries (512 bytes) overflow past UvdLevel into VceLevel/AcpLevel/SamuLevel/Ulv/Smio/...
[DF-1296] adjacent VceLevel[0] corrupted: YES (overflow into sibling field) ; guard region hit: 64 entries

--- Fix demonstration ---
[DF-1296] FIX: clamp UvdLevelCount 40 -> 8 -> loop stays in UvdLevel[0..7], no overflow
RUN_EXIT=0