---
id: CVE-2026-120337
title: >-
  VStarcam O-KAM SuperIPCam P2P Session Teardown SuperIPCam.exe FUN_005a2d44 use
  after free
summary: >-
  A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected
  by this issue is the function FUN_005a2d44 of the file SuperIPCam.exe of the
  component P2P Session Teardown. This manipulation causes use after free. The
  atta…
severity: high
cvss: 7.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'
cvssSource: cna
cwe:
  - CWE-416
  - CWE-119
vendor: VStarcam
product: O-KAM SuperIPCam
affected:
  - o-kam_superipcam 1.3.3.32
ssvc:
  exploitation: poc
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-11-06T19:19:47.898509Z'
exploitAvailable: true
published: '2026-11-02'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T19:19:58.584Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-120337'
references:
  - url: 'https://vuldb.com/vuln/429662'
    label: >-
      VDB-429662 | VStarcam O-KAM SuperIPCam P2P Session Teardown SuperIPCam.exe
      FUN_005a2d44 use after free
  - url: 'https://vuldb.com/vuln/429662/cti'
    label: 'VDB-429662 | CTI Indicators (IOB, IOC, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-120337'
    label: CVE-2026-120337 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1016302'
    label: >-
      Submit #1016302 | Shenzhen VStarcam Technology Co., Ltd O-KAM SuperIPCam
      1.3.3.32 CWE-416 + CWE-362: Use-After-Free Race Condition
  - url: 'https://gist.github.com/Ishanoshada/cb73d61f792c77767338568501b135c9'
tags:
  - cve.org
  - exploit-available
epss: 0.00293
epssPercentile: 0.22096
ingestedAt: '2026-11-05T19:30:42.622Z'
---

## Overview

A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected by this issue is the function FUN_005a2d44 of the file SuperIPCam.exe of the component P2P Session Teardown. This manipulation causes use after free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

## Affected

- `o-kam_superipcam 1.3.3.32`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.