fdo#81516: vcl: limit number of CFFs read from font

Change-Id: I9928b9805169a2dbb41be669dc37617b30bc672b