A Heap Overflow (Remote Code Execution) issue was discovered in Design Science MathType 6.9c. Crafted input can modify the next pointer of a linked list. This is fixed in 6.9d.
- https://drive.google.com/open?id=1jIKf-EgP4qD-VmNHM1LbWGLbJLOClDim
No PoCs found on GitHub currently.