https://www.systemtek.co.uk/2018/11/harfbuzz-invalid-read-denial-of-service-vulnerability-cve-2015-9274/