[Bug 1444898] New: CVE-2017-7857 freetype: heap-based buffer overflow related to the TT_Get_MM_Var function