---
id: "CVE-2026-120336"
kind: "vulnerability"
aliases: ["CVE-2026-120336"]
title: "VStarcam O-KAM Client: stack buffer overflow lets remote attackers run code"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "other"
products: [{"name": "O-KAM Client", "fixed": [], "affected": "1.3.3.32", "ecosystem": "vendor"}]
ecosystems: []
tags: ["cameras", "desktop-client", "o-kam", "other", "vstarcam", "windows"]
not_affected_if: ["unknown"]
published_at: "2026-11-02T04:16:53+00:00"
first_seen_at: "2026-11-02T04:51:28+00:00"
updated_at: "2026-11-02T04:53:46+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-120336", "first_seen_at": "2026-11-02T04:51:28+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-11-02T04:53:46+00:00"}]
---

# VStarcam O-KAM Client: stack buffer overflow lets remote attackers run code

A stack-based buffer overflow in the DevDll_925.dll library of the VStarcam O-KAM Client 1.3.3.32 can be triggered remotely. A public exploit exists, so an attacker could likely crash the client or run code on the machine running it.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:O-KAM Client affected 1.3.3.32 fixed ?

## How to check

Check whether the O-KAM Client is installed on any Windows machine and whether it is version 1.3.3.32 (the only version named). The sources give no install path or way to read the version. Also check whether DevDll_925.dll sits in the client's install folder. Also check any other VStarcam desktop tools you run, since the sources do not rule them out.

## Timeline

- 2026-11-02T04:51:28+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-120336
- 2026-11-02T04:53:46+00:00 analyst — VulDB (CNA) and NVD: stack overflow in FUN_10003EA0 of DevDll_925.dll, O-KAM Client 1.3.3.32, remote, no auth, PoC published on a GitHub gist (link not shown on the VulDB page, so not read). Vendor did not respond; no fix or mitigation known, VulDB suggests replacing the product. No vendor page, so nothing verified. Related: CVE-2026-120337 (SuperIPCam.exe, same version). Not seen exploited.

## Documents

- [advisory] VulDB VDB-429661: VStarcam O-KAM Client DevDll_925.dll stack-based overflow https://vuldb.com/vuln/429661
- [mentions] OpenCVE CVE-2026-120336 https://app.opencve.io/cve/CVE-2026-120336

## From the sources

A vulnerability was found in VStarcam O-KAM Client 1.3.3.32. Affected by this vulnerability is the function FUN_10003EA0 in the library DevDll_925.dll. The manipulation results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_