CVE-2020-7816: Hmtalk Daoffice

High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days.

A vulnerability in the JPEG image parsing module in DaView Indy, DaVa+, DaOffice softwares could allow an unauthenticated, remote attacker to cause an arbitrary code execution on an affected device.nThe vulnerability is due to a stack overflow read. An attacker could exploit this vulnerability by sending a crafted PDF file to an affected device.

Affected products

• Hmtalk Daoffice: before 8.995 (fixed in 8.995)
• Hmtalk Dava+: before 8.995 (fixed in 8.995)
• Hmtalk Daview Indy: before 8.995 (fixed in 8.995)

Published 2020-06-30. Last modified 2026-06-17.