https://www.systemtek.co.uk/2019/04/cairo-cairo-truetype-subset-c-denial-of-service-vulnerability-cve-2017-9814/