This new zero-day vulnerability is reported to be a memory bug in the FreeType font rendering library. This was spotted being abused by a threat actor by the Project Zero team. Project Zero team lead Ben Hawkes advises other app vendors of Freetype to also adopt the emergency fix released on the FreeType website.