Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for O-KAM SuperIPCam by VStarcam

    CVE-2026-120337 (GCVE-0-2026-120337)

    Vulnerability from nvd – Published: 2026-11-02 03:30 – Updated: 2026-11-02 03:30
    VLAI
    Title
    VStarcam O-KAM SuperIPCam P2P Session Teardown SuperIPCam.exe FUN_005a2d44 use after free
    Summary
    A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected by this issue is the function FUN_005a2d44 of the file SuperIPCam.exe of the component P2P Session Teardown. This manipulation causes use after free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
    Severity
    6.9 (Medium)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
    7.3 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
    7.3 (High)
    CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
    CWE
    Assigner
    VulDB CNA under the mitre root
    CNA scorecard B 83/100 over 3794 records in the last 180 days details
    References
    URL Tags
    https://vuldb.com/vuln/429662 vdb-entrytechnical-description
    https://vuldb.com/vuln/429662/cti signaturepermissions-required
    https://vuldb.com/cve/CVE-2026-120337 third-party-advisory
    https://vuldb.com/submit/1016302 third-party-advisory
    https://gist.github.com/Ishanoshada/cb73d61f792c7… exploit
    Impacted products
    Vendor Product Version
    VStarcam O-KAM SuperIPCam Affected: 1.3.3.32
        cpe:2.3:a:vstarcam:o-kam_superipcam:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Credits
    VulDB CNA Team
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:vstarcam:o-kam_superipcam:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "P2P Session Teardown"
          ],
          "product": "O-KAM SuperIPCam",
          "vendor": "VStarcam",
          "versions": [
            {
              "status": "affected",
              "version": "1.3.3.32"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected by this issue is the function FUN_005a2d44 of the file SuperIPCam.exe of the component P2P Session Teardown. This manipulation causes use after free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 7.5,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-119",
              "description": "Memory Corruption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-02T03:30:15.575Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-429662 | VStarcam O-KAM SuperIPCam P2P Session Teardown SuperIPCam.exe FUN_005a2d44 use after free",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/429662"
        },
        {
          "name": "VDB-429662 | CTI Indicators (IOB, IOC, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/429662/cti"
        },
        {
          "name": "CVE-2026-120337 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-120337"
        },
        {
          "name": "Submit #1016302 | Shenzhen VStarcam Technology Co., Ltd O-KAM SuperIPCam 1.3.3.32 CWE-416 + CWE-362: Use-After-Free Race Condition",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/1016302"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://gist.github.com/Ishanoshada/cb73d61f792c77767338568501b135c9"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-11-01T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-11-01T01:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-11-01T15:41:52.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "VStarcam O-KAM SuperIPCam P2P Session Teardown SuperIPCam.exe FUN_005a2d44 use after free",
      "x_generator": [
        "VulDB PVTS v202611"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-120337",
    "datePublished": "2026-11-02T03:30:15.575Z",
    "dateReserved": "2026-11-01T14:36:42.610Z",
    "dateUpdated": "2026-11-02T03:30:15.575Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-120337 (GCVE-0-2026-120337)

    Vulnerability from cvelistv5 – Published: 2026-11-02 03:30 – Updated: 2026-11-02 03:30
    VLAI
    Title
    VStarcam O-KAM SuperIPCam P2P Session Teardown SuperIPCam.exe FUN_005a2d44 use after free
    Summary
    A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected by this issue is the function FUN_005a2d44 of the file SuperIPCam.exe of the component P2P Session Teardown. This manipulation causes use after free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
    Severity
    6.9 (Medium)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
    7.3 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
    7.3 (High)
    CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
    CWE
    Assigner
    VulDB CNA under the mitre root
    CNA scorecard B 83/100 over 3794 records in the last 180 days details
    References
    URL Tags
    https://vuldb.com/vuln/429662 vdb-entrytechnical-description
    https://vuldb.com/vuln/429662/cti signaturepermissions-required
    https://vuldb.com/cve/CVE-2026-120337 third-party-advisory
    https://vuldb.com/submit/1016302 third-party-advisory
    https://gist.github.com/Ishanoshada/cb73d61f792c7… exploit
    Impacted products
    Vendor Product Version
    VStarcam O-KAM SuperIPCam Affected: 1.3.3.32
        cpe:2.3:a:vstarcam:o-kam_superipcam:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Credits
    VulDB CNA Team
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:vstarcam:o-kam_superipcam:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "P2P Session Teardown"
          ],
          "product": "O-KAM SuperIPCam",
          "vendor": "VStarcam",
          "versions": [
            {
              "status": "affected",
              "version": "1.3.3.32"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected by this issue is the function FUN_005a2d44 of the file SuperIPCam.exe of the component P2P Session Teardown. This manipulation causes use after free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 7.5,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-119",
              "description": "Memory Corruption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-02T03:30:15.575Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-429662 | VStarcam O-KAM SuperIPCam P2P Session Teardown SuperIPCam.exe FUN_005a2d44 use after free",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/429662"
        },
        {
          "name": "VDB-429662 | CTI Indicators (IOB, IOC, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/429662/cti"
        },
        {
          "name": "CVE-2026-120337 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-120337"
        },
        {
          "name": "Submit #1016302 | Shenzhen VStarcam Technology Co., Ltd O-KAM SuperIPCam 1.3.3.32 CWE-416 + CWE-362: Use-After-Free Race Condition",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/1016302"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://gist.github.com/Ishanoshada/cb73d61f792c77767338568501b135c9"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-11-01T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-11-01T01:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-11-01T15:41:52.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "VStarcam O-KAM SuperIPCam P2P Session Teardown SuperIPCam.exe FUN_005a2d44 use after free",
      "x_generator": [
        "VulDB PVTS v202611"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-120337",
    "datePublished": "2026-11-02T03:30:15.575Z",
    "dateReserved": "2026-11-01T14:36:42.610Z",
    "dateUpdated": "2026-11-02T03:30:15.575Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}