high
advisory
VStarcam O-KAM SuperIPCam: Use-after-free vulnerability (CVE-2026-120337)
A use-after-free vulnerability exists in the P2P Session Teardown component of VStarcam O-KAM SuperIPCam 1.3.3.32.
CVE search metadata
CVE search record: CVE-2026-120337. Severity: high. CVSS: 7.3. KEV: no. Product: O-KAM SuperIPCam (1.3.3.32). Brief: VStarcam O-KAM SuperIPCam: Use-after-free vulnerability (CVE-2026-120337). Brief link: https://feed.craftedsignal.io/briefs/2026-11-vstarcam-superipcam-uaf/
Triage facts
Revision 1- Applicability
- O-KAM SuperIPCam (1.3.3.32)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 2, 07:17 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
CVE-2026-120337 is a use-after-free vulnerability in VStarcam O-KAM SuperIPCam version 1.3.3.32. The vulnerability affects the function FUN_005a2d44 of SuperIPCam.exe within the P2P Session Teardown component. The vulnerability can be initiated remotely. Public exploit code has been disclosed. The vendor was contacted but did not respond.