diff --git a/src/woff2_dec.cc b/src/woff2_dec.cc
index 36f1b05..7740a5d 100644
--- a/src/woff2_dec.cc
+++ b/src/woff2_dec.cc
@@ -720,6 +720,9 @@ bool ReadTableDirectory(Buffer* file, std::vector<Table>* tables,
       if (!ReadBase128(file, &transform_length)) {
         return FONT_COMPRESSION_FAILURE();
       }
+      if (tag == kLocaTableTag && transform_length) {
+        return FONT_COMPRESSION_FAILURE();
+      }
     }
     table->tag = tag;
     table->flags = flags;