CVE-2020-7852 HIGH

CVE-2020-7852: DaviewIndy Heap Overflow Vulnerabilities

Vendor Humantalk

Product DaviewIndy

Weakness CWE-122

Published March 24, 2021

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

7.8/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

DaviewIndy has a Heap-based overflow vulnerability, triggered when the user opens a malformed ex.j2c format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.

Key dates

02Disclosure timeline

March 24, 2021 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-7852 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/122.html

Related vulnerabilities

04Related CVE

CVE-2025-8302 Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability CVE-2025-11010 vstakhov libucl ucl_util.c ucl_include_common heap-based overflow CVE-2024-38060 Windows Imaging Component Remote Code Execution Vulnerability CVE-2021-3927 Heap-based Buffer Overflow in vim/vim CVE-2026-27301 Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)