Live › vulnerability › CVE-2026-120336
A stack-based buffer overflow in the DevDll_925.dll library of the VStarcam O-KAM Client 1.3.3.32 can be triggered remotely. A public exploit exists, so an attacker could likely crash the client or run code on the machine running it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 04:51 UTC. All times on this page are UTC.
Windows users running the VStarcam O-KAM Client desktop app, version 1.3.3.32 (DevDll_925.dll, function FUN_10003EA0). VulDB says the attack is remote and needs no authentication, but neither VulDB nor NVD says which network path or input reaches the function (for example camera or P2P traffic). Teams that do not run this Windows client can skip it. The mobile app O-KAM Pro and the camera firmware are not named in any source.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| O-KAM Client | vendor | 1.3.3.32 | – |
1.3.3.32 (the only version named)No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was found in VStarcam O-KAM Client 1.3.3.32. Affected by this vulnerability is the function FUN_10003EA0 in the library DevDll_925.dll. The manipulation results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
This page as .md · .json · in your agent: get_signal("CVE-2026-120336")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.