Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2026-120336: VStarcam O-KAM Client enables remote code execution
CVE-2026-120336 · published 3 days ago
Summary
The VStarcam O-KAM Client version 1.3.3.32 contains a flaw in its DevDll_925.dll file that lets attackers overflow a memory buffer from a distance. This could let a hacker run their own code on the affected system. Apply the vendor's security update or replace the client with a patched version as soon as possible.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| vstarcam | o-kam client | 1.3.3.32 |
Original advisory text
VStarcam O-KAM Client DevDll_925.dll FUN_10003EA0 stack-based overflow
A vulnerability was found in VStarcam O-KAM Client 1.3.3.32. Affected by this vulnerability is the function FUN_10003EA0 in the library DevDll_925.dll. The manipulation results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Severity
5.5
Medium
Type
CWE-121Stack-based Buffer Overflow
CWE-119Buffer Overflow
Timeline
Published2 Nov 2026
Updated3 Nov 2026
First seen2 Nov 2026
Track software like this
Free during beta