<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: hmtalk</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2020-7872: DaviewIndy v8.98.7.0 and earlier versions have a Integer overflow vulnerability, triggered when the user opens</title><link>https://patchthecve.com/cve/CVE-2020-7872.html</link><guid>https://patchthecve.com/cve/CVE-2020-7872.html</guid><pubDate>Wed, 17 Jun 2026 03:25:35 +0000</pubDate><description>HIGH 7.8: DaviewIndy v8.98.7.0 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed format file that is mishandled by DaviewIndy. Attackers could exploit this and arbitrary code execution.</description></item><item><title>CVE-2020-7852: DaviewIndy has a Heap-based overflow vulnerability, triggered when the user opens a malformed ex.j2c format fi</title><link>https://patchthecve.com/cve/CVE-2020-7852.html</link><guid>https://patchthecve.com/cve/CVE-2020-7852.html</guid><pubDate>Wed, 17 Jun 2026 03:25:33 +0000</pubDate><description>HIGH 7.8: DaviewIndy has a Heap-based overflow vulnerability, triggered when the user opens a malformed ex.j2c format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.</description></item><item><title>CVE-2020-7823: DaviewIndy has a Memory corruption vulnerability, triggered when the user opens a malformed image file that is</title><link>https://patchthecve.com/cve/CVE-2020-7823.html</link><guid>https://patchthecve.com/cve/CVE-2020-7823.html</guid><pubDate>Wed, 17 Jun 2026 03:25:30 +0000</pubDate><description>HIGH 7.8: DaviewIndy has a Memory corruption vulnerability, triggered when the user opens a malformed image file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.</description></item><item><title>CVE-2020-7822: DaviewIndy has a Heap-based overflow vulnerability, triggered when the user opens a malformed image file that </title><link>https://patchthecve.com/cve/CVE-2020-7822.html</link><guid>https://patchthecve.com/cve/CVE-2020-7822.html</guid><pubDate>Wed, 17 Jun 2026 03:25:30 +0000</pubDate><description>HIGH 7.8: DaviewIndy has a Heap-based overflow vulnerability, triggered when the user opens a malformed image file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.</description></item><item><title>CVE-2020-7829: DaviewIndy 8.98.4 and earlier version contain Heap-based overflow vulnerability, triggered when the user opens</title><link>https://patchthecve.com/cve/CVE-2020-7829.html</link><guid>https://patchthecve.com/cve/CVE-2020-7829.html</guid><pubDate>Wed, 17 Jun 2026 03:25:31 +0000</pubDate><description>HIGH 7.8: DaviewIndy 8.98.4 and earlier version contain Heap-based overflow vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.</description></item><item><title>CVE-2020-7828: DaviewIndy 8.98.4 and earlier version contain Heap-based overflow vulnerability, triggered when the user opens</title><link>https://patchthecve.com/cve/CVE-2020-7828.html</link><guid>https://patchthecve.com/cve/CVE-2020-7828.html</guid><pubDate>Wed, 17 Jun 2026 03:25:31 +0000</pubDate><description>HIGH 7.8: DaviewIndy 8.98.4 and earlier version contain Heap-based overflow vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.</description></item><item><title>CVE-2020-7827: DaviewIndy 8.98.7 and earlier version contain Use-After-Free vulnerability, triggered when the user opens a ma</title><link>https://patchthecve.com/cve/CVE-2020-7827.html</link><guid>https://patchthecve.com/cve/CVE-2020-7827.html</guid><pubDate>Wed, 17 Jun 2026 03:25:31 +0000</pubDate><description>HIGH 7.8: DaviewIndy 8.98.7 and earlier version contain Use-After-Free vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.</description></item><item><title>CVE-2020-7818: DaviewIndy 8.98.9 and earlier has a Heap-based overflow vulnerability, triggered when the user opens a malform</title><link>https://patchthecve.com/cve/CVE-2020-7818.html</link><guid>https://patchthecve.com/cve/CVE-2020-7818.html</guid><pubDate>Wed, 17 Jun 2026 03:25:30 +0000</pubDate><description>HIGH 7.8: DaviewIndy 8.98.9 and earlier has a Heap-based overflow vulnerability, triggered when the user opens a malformed PDF file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.</description></item><item><title>CVE-2020-7816: A vulnerability in the JPEG image parsing module in DaView Indy, DaVa+, DaOffice softwares could allow an unau</title><link>https://patchthecve.com/cve/CVE-2020-7816.html</link><guid>https://patchthecve.com/cve/CVE-2020-7816.html</guid><pubDate>Wed, 17 Jun 2026 03:25:29 +0000</pubDate><description>HIGH 7.0: A vulnerability in the JPEG image parsing module in DaView Indy, DaVa+, DaOffice softwares could allow an unauthenticated, remote attacker to cause an arbitrary code execution on an affected device.nThe vulnerability is due to a stack overflow read. An attacker could exploit this vulnerability by se</description></item><item><title>CVE-2019-9137: DaviewIndy 8.98.7 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a </title><link>https://patchthecve.com/cve/CVE-2019-9137.html</link><guid>https://patchthecve.com/cve/CVE-2019-9137.html</guid><pubDate>Wed, 17 Jun 2026 02:43:07 +0000</pubDate><description>HIGH 7.8: DaviewIndy 8.98.7 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed Image file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.</description></item></channel></rss>