Description
A vulnerability was found in VStarcam O-KAM Client 1.3.3.32. Affected by this vulnerability is the function FUN_10003EA0 in the library DevDll_925.dll. The manipulation results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-11-02
Score: 6.9 Medium
EPSS: n/a
KEV: No
Impact: Remote Code Execution
Action: Apply Patch
AI Analysis

Impact

The O‑KAM Client contains a stack‑based buffer overflow in the function FUN_10003EA0 of DevDll_925.dll. The overflow can be triggered remotely, allowing an attacker to overwrite the stack and potentially execute arbitrary code. This vulnerability is instantiated in VStarcam O‑KAM Client 1.3.3.32 and is flagged as a public exploit.

Affected Systems

VStarcam O‑KAM Client version 1.3.3.32 is affected. No other sub‑versions are listed as impacted.

Risk and Exploitability

The CVSS score of 6.9 indicates a moderate severity. The EPSS score is not available, so the current exploitation probability cannot be quantified. The vulnerability is not in the CISA KEV catalog, but the publicly disclosed exploit and remote exposure underscore the need for immediate remediation. Attackers would need remote reach to the client system to trigger the overflow.

Generated by OpenCVE AI on November 2, 2026 at 04:20 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade VStarcam O‑KAM Client to a patched version once it becomes available.
  • Restrict remote access to the O‑KAM Client service to limit exposure.
  • Monitor system logs for anomalous activity such as unexpected process creation or application crashes that may indicate exploitation.

Generated by OpenCVE AI on November 2, 2026 at 04:20 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 02 Nov 2026 03:30:00 +0000

Type Values Removed Values Added
Description A vulnerability was found in VStarcam O-KAM Client 1.3.3.32. Affected by this vulnerability is the function FUN_10003EA0 in the library DevDll_925.dll. The manipulation results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Title VStarcam O-KAM Client DevDll_925.dll FUN_10003EA0 stack-based overflow
First Time appeared Vstarcam
Vstarcam o-kam Client
Weaknesses CWE-119
CWE-121
CPEs cpe:2.3:a:vstarcam:o-kam_client:*:*:*:*:*:*:*:*
Vendors & Products Vstarcam
Vstarcam o-kam Client
References
Metrics cvssV2_0

{'score': 7.5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 7.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 7.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Vstarcam O-kam Client
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-11-02T03:15:18.679Z

Reserved: 2026-11-01T14:36:38.832Z

Link: CVE-2026-120336

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-11-02T04:16:53.033

Modified: 2026-11-02T04:16:53.033

Link: CVE-2026-120336

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-02T04:30:16Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-121

    Stack-based Buffer Overflow