I have got this to work using VT_ARRAY | VT_UI1 in my variant, passing adBinary as the data-type to CreateParameter.
There is also a chance (from other things I've read) that Oracle would be happy with a plain BSTR parameter containing just the binary data in HEX notation.