diff --git a/src/cff/cffgload.c b/src/cff/cffgload.c
index 9330c05..4e17eb6 100644
--- a/src/cff/cffgload.c
+++ b/src/cff/cffgload.c
@@ -2448,7 +2448,10 @@
           return CFF_Err_Unimplemented_Feature;
         }
 
-      decoder->top = args;
+        decoder->top = args;
+
+        if ( decoder->top - stack >= CFF_MAX_OPERANDS )
+          goto Stack_Overflow;
 
       } /* general operator processing */