FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1builderclose_contour function in psaux/psobjs.c.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-8287.json"