FreeType 2 before 2017-02-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the ttsizereset function in truetype/ttobjs.c.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-7864.json"