PatchSiren

VStarcam CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM VStarcam CVE published 2026-11-02

CVE-2026-120337

A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32, specifically in the function FUN_005a2d44 of the file SuperIPCam.exe, which is part of the P2P Session Teardown component. This issue causes a use-after-free condition that can be exploited remotely. The exploit has been publicly disclosed, and although the vendor was contacted, no response was received.

MEDIUM VStarcam CVE published 2026-11-02

CVE-2026-120336

A vulnerability was found in VStarcam O-KAM Client 1.3.3.32, specifically in the function FUN_10003EA0 in the library DevDll_925.dll, which results in a stack-based buffer overflow. This issue can be exploited remotely. The exploit has been made public, and although the vendor was contacted, no response was received. The vulnerability affects the VStarcam O-KAM Client and could lead to disruption of servi [truncated]