see #142333 & http://freetype.org/freetype2/patches/rogue-patches.html
our xpdf is not affected because of poppler. I just tried out, thanks for reporting