---
id: "CVE-2026-120337"
kind: "vulnerability"
aliases: ["CVE-2026-120337"]
title: "VStarcam O-KAM SuperIPCam: use-after-free in P2P session teardown, remote"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "other"
products: [{"name": "O-KAM SuperIPCam", "fixed": [], "affected": "1.3.3.32", "ecosystem": "vendor"}]
ecosystems: []
tags: ["desktop-client", "ip-camera", "other", "p2p", "vstarcam", "windows"]
not_affected_if: ["no-p2p-access", "not-installed", "not-internet-exposed", "trusted-network-only"]
published_at: "2026-11-02T04:16:53+00:00"
first_seen_at: "2026-11-02T04:51:28+00:00"
updated_at: "2026-11-02T04:53:49+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-120337", "first_seen_at": "2026-11-02T04:51:28+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-11-02T04:53:49+00:00"}]
---

# VStarcam O-KAM SuperIPCam: use-after-free in P2P session teardown, remote

VStarcam O-KAM SuperIPCam 1.3.3.32 has a use-after-free race in P2P session teardown (FUN_005a2d44 in SuperIPCam.exe). The researcher's public PoC crashes the Windows client under a targeted message flood; code execution is theoretically possible but not demonstrated. The vendor did not respond and no fix is known.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:O-KAM SuperIPCam affected 1.3.3.32 fixed ?

## How to check

- Check whether SuperIPCam.exe (O-KAM SuperIPCam, Windows client) is installed and is version 1.3.3.32 (file properties > Details)
- Check whether the client connects to cameras or peers over P2P from networks you do not control
- No vendor fix is known; also check any other VStarcam client builds you run, but only 1.3.3.32 is reported

## Fix

No fix known: vendor did not respond to the researcher. Until one exists, stop using SuperIPCam.exe 1.3.3.32 on untrusted networks or replace it.

## Timeline

- 2026-11-02T04:51:28+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-120337
- 2026-11-02T04:53:49+00:00 analyst — Sources: VulDB + researcher gist (PoC). No vendor advisory; vendor did not respond; no fix known. Researcher demonstrated crash/DoS only; RCE 'theoretically possible, not demonstrated'. Attacker needs P2P protocol reach (rogue camera, MITM, local peer). Nothing verified: no vendor page.

## Documents

- [describes] VDB-429662: VStarcam O-KAM SuperIPCam 1.3.3.32 use after free https://vuldb.com/vuln/429662
- [poc] Use-After-Free Race in O-KAM SuperIPCam Session Teardown (researcher write-up and PoC) https://gist.github.com/Ishanoshada/cb73d61f792c77767338568501b135c9

## From the sources

A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected by this issue is the function FUN_005a2d44 of the file SuperIPCam.exe of the component P2P Session Teardown. This manipulation causes use after free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_