A Heap Overflow (Remote Code Execution) issue was discovered in Design Science MathType 6.9c. Crafted input can modify the next pointer of a linked list. This is fixed in 6.9d.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-18387
https://drive.google.com/open?id=1jIKf-EgP4qD-VmNHM1LbWGLbJLOClDim