[ENOMEM] unchecked resize in CFF2.
diff --git a/src/hb-ot-cff2-table.hh b/src/hb-ot-cff2-table.hh
index 075a0d4..829217f 100644
--- a/src/hb-ot-cff2-table.hh
+++ b/src/hb-ot-cff2-table.hh
@@ -441,7 +441,8 @@
{ fini (); return; }
fdCount = fdArray->count;
- privateDicts.resize (fdCount);
+ if (!privateDicts.resize (fdCount))
+ { fini (); return; }
/* parse font dicts and gather private dicts */
for (unsigned int i = 0; i < fdCount; i++)
diff --git a/test/fuzzing/fonts/clusterfuzz-testcase-minimized-hb-subset-fuzzer-5181909018345472 b/test/fuzzing/fonts/clusterfuzz-testcase-minimized-hb-subset-fuzzer-5181909018345472
new file mode 100644
index 0000000..250710b
--- /dev/null
+++ b/test/fuzzing/fonts/clusterfuzz-testcase-minimized-hb-subset-fuzzer-5181909018345472
Binary files differ
