CVE-2020-7852: Hmtalk Daviewindy

High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days.

DaviewIndy has a Heap-based overflow vulnerability, triggered when the user opens a malformed ex.j2c format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.

Affected products

• Hmtalk Daviewindy: up to and including 9.0

Published 2021-03-24. Last modified 2026-06-17.