CVE-2018-6641

PoC —

CVSS 3.1

9.8 critical

EPSS

6%p92

Published

Feb 28, 2018 (Feb 28, 2018)

Modified

Jun 17, 2026

Description

An Arbitrary Free (Remote Code Execution) issue was discovered in Design Science MathType 6.9c. Crafted input can overwrite a structure, leading to a function call with an invalid parameter, and a subsequent free of important data such as a function pointer or list pointer. This is fixed in 6.9d.

Vendors: wiris
Products: mathtype
Weakness: CWE-416
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (5.6%)

In the news0 stories

No ingested article mentions this CVE yet.