See how libschrift compares to other vendors in security performance
libschrift through 0.10.2 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a font with unitsPerEm of 0 in the head table. Attackers can provide a crafted TrueType font whose NaN glyph coordinates bypass clippoints(), causing an out-of-bounds raster read in drawline() during sftrender() and crashing the process.