CVE-2017-7858

CVE-2017-7858 affects FreeType 2, with an out-of-bounds write related to TT_Get_MM_Var in truetype/ttgxvar.c and the sfnt_init_face function in sfnt/sfobjs.c. Multiple connected sources corroborate the vulnerability in FreeType 2 before 2017-03-07 and describe the impact as potentially dangerous ...