{"id":"CVE-2026-120337","kind":"vulnerability","aliases":["CVE-2026-120337"],"related":[],"title":"VStarcam O-KAM SuperIPCam: use-after-free in P2P session teardown, remote","description":"A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected by this issue is the function FUN_005a2d44 of the file SuperIPCam.exe of the component P2P Session Teardown. This manipulation causes use after free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.","summary":"VStarcam O-KAM SuperIPCam 1.3.3.32 has a use-after-free race in P2P session teardown (FUN_005a2d44 in SuperIPCam.exe). The researcher's public PoC crashes the Windows client under a targeted message flood; code execution is theoretically possible but not demonstrated. The vendor did not respond and no fix is known.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"O-KAM SuperIPCam","fixed":[],"affected":"1.3.3.32","ecosystem":"vendor"}],"ecosystems":[],"tags":["desktop-client","ip-camera","other","p2p","vstarcam","windows"],"not_affected_if":["no-p2p-access","not-installed","not-internet-exposed","trusted-network-only"],"how_to_check":"- Check whether SuperIPCam.exe (O-KAM SuperIPCam, Windows client) is installed and is version 1.3.3.32 (file properties > Details)\n- Check whether the client connects to cameras or peers over P2P from networks you do not control\n- No vendor fix is known; also check any other VStarcam client builds you run, but only 1.3.3.32 is reported","fix":"No fix known: vendor did not respond to the researcher. Until one exists, stop using SuperIPCam.exe 1.3.3.32 on untrusted networks or replace it.","status":"open","published_at":"2026-11-02T04:16:53+00:00","first_seen_at":"2026-11-02T04:51:28+00:00","triaged_at":"2026-11-02T04:52:21+00:00","updated_at":"2026-11-02T04:53:49+00:00","category":"other","confidence":0.7,"triage":{"at":"2026-11-02T04:52:21Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"VStarcam O-KAM SuperIPCam: use-after-free in P2P session teardown, remote","impact":"high","summary":"VStarcam O-KAM SuperIPCam 1.3.3.32 has a use-after-free flaw in its P2P session teardown code in SuperIPCam.exe. A remote attacker can trigger memory corruption, which may allow code execution, and a public exploit has been disclosed.","audience":"businesses","category":"other","nicknames":[],"who_cares":["vstarcam","ip-camera","p2p","windows"],"confidence":0.6,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Remote attacker may corrupt memory and possibly run code on the device","analyst_note":"Confirm whether a vendor fix exists and which versions are affected; the NVD entry is the only source and the vendor did not respond.","how_to_check":"- Check whether the camera or SuperIPCam.exe is running firmware or software version `1.3.3.32`\n- Check whether the device is reachable from the internet through its P2P or cloud service\n- Check the vendor's page for a newer version; unknown whether one exists","plain_action":"","needs_analyst":true,"not_affected_if":["no-p2p-access","not-internet-exposed"],"who_is_affected":"Organizations running VStarcam O-KAM SuperIPCam 1.3.3.32 cameras or the SuperIPCam.exe client, especially where P2P remote access is enabled. The flaw is in the P2P session teardown path, so devices that are not reachable from outside the network are less exposed. The sources do not say which other versions are affected.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000726,"input_tokens":4171,"output_tokens":617,"severity_before":"high"},"analyst_status":"done","analyst_note":"Confirm whether a vendor fix exists and which versions are affected; the NVD entry is the only source and the vendor did not respond.","search":"'-120337':17A,20A '-2026':16A,19A '005a2d44':53B,107C '1.3.3.32':40B,98C 'affect':99C 'attack':125C 'camera':30B 'caus':120C 'client':27B,64B 'code':70B 'compon':114C 'contact':143C 'crash':61B 'cve':15A,18A 'demonstr':77B 'desktop':26B 'desktop-cli':25B 'determin':91C 'disclos':135C 'disclosur':147C 'earli':144C 'execut':71B 'exploit':131C 'file':110C 'fix':85B 'flood':69B 'free':9A,46B,123C 'fun':52B,106C 'function':105C 'initi':128C 'ip':29B 'ip-camera':28B 'issu':102C 'kam':4A,23A,38B,96C 'known':87B 'manipul':119C 'may':137C 'messag':68B 'o':3A,22A,37B,95C 'o-kam':2A,21A,36B,94C 'p2p':11A,32B,49B,115C 'poc':60B 'possibl':74B 'public':59B,134C 'race':47B 'remot':14A,129C 'research':57B 'respond':82B,151C 'session':12A,50B,116C 'superipcam':5A,24A,39B,97C 'superipcam.exe':55B,111C 'target':67B 'teardown':13A,51B,117C 'theoret':73B 'use':7A,44B,121C 'use-after-fre':6A,43B 'util':139C 'vendor':79B,141C 'vstarcam':1A,33B,35B,93C 'vulner':89C 'way':154C 'window':34B,63B","nicknames":[],"mitigations":[],"who_affected":"Organizations running VStarcam O-KAM SuperIPCam 1.3.3.32 cameras or the SuperIPCam.exe client, especially where P2P remote access is enabled. The flaw is in the P2P session teardown path, so devices that are not reachable from outside the network are less exposed. The sources do not say which other versions are affected.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":["okamsuperipcam","superipcam"],"ptokens":["kam","superipcam"],"labels":["desktopclient","high","ipcamera","other","p2p","vstarcam","windows"],"first_public_at":"2026-11-02T04:16:53+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":1,"sources":[{"source":"nvd","external_id":"CVE-2026-120337","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-120337","severity":null,"published_at":"2026-11-02T04:16:53+00:00","modified_at":"2026-11-02T04:16:53+00:00","first_seen_at":"2026-11-02T04:51:28+00:00","fetched_at":"2026-11-02T04:51:28+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-120337:1344","url":null,"severity":null,"published_at":"2026-11-02T04:53:49+00:00","modified_at":"2026-11-02T04:53:49+00:00","first_seen_at":"2026-11-02T04:53:49+00:00","fetched_at":"2026-11-02T04:53:49+00:00","note":"Sources: VulDB + researcher gist (PoC). No vendor advisory; vendor did not respond; no fix known. Researcher demonstrated crash/DoS only; RCE 'theoretically possible, not demonstrated'. Attacker needs P2P protocol reach (rogue camera, MITM, local peer). Nothing verified: no vendor page."}],"documents":[{"id":42323,"url":"https://vuldb.com/vuln/429662","title":"VDB-429662: VStarcam O-KAM SuperIPCam 1.3.3.32 use after free","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"describes","confidence":null,"note":null},{"id":42324,"url":"https://gist.github.com/Ishanoshada/cb73d61f792c77767338568501b135c9","title":"Use-After-Free Race in O-KAM SuperIPCam Session Teardown (researcher write-up and PoC)","kind":"poc","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"poc","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}