A remote attacker that is able to load a specially crafted font file is able to execute arbitrary code on the affected host.