[Bug 1034191] VUL-0: CVE-2016-10328: freetype2: heap-based buffer overflow (cff_parser_run function in cff/cffparse.c)