ftbench.c in FreeType Demo Programs up to and including 2.12.1 has a heap-based buffer overflow.
freedesktop freetype demo programs