Make sure don't overread the strings.
Don't use sscanf but use a custom hex read function.

Fixes #2340