vmncdec: Sanity-check width/height before using it

—-

Remove insecure nsf plugin (#1395126)