CVE-2021-29606: Heap OOB read in TFLite

A specially crafted TFLite model could trigger an OOB read on heap in the TFLite implementation of Split_V:

const int input_size = SizeOfDimension(input, axis_value);

If axis_value is not a value between 0 and NumDimensions(input), then the SizeOfDimension function will access data outside the bounds of the tensor shape array:

inline int SizeOfDimension(const TfLiteTensor* t, int dim) {
return t->dims->data[dim];
}