# CVE-2026-120336: VStarcam O-KAM Client DevDll_925.dll FUN_10003EA0 stack-based overflow

Status: published. Published: 2026-11-02. Updated: 2026-11-02.

A vulnerability was found in VStarcam O-KAM Client 1.3.3.32. Affected by this vulnerability is the function FUN_10003EA0 in the library DevDll_925.dll. The manipulation results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

## Remediation

No remediation reported in collected sources

## Affected products and versions

- VStarcam / O-KAM Client: 1.3.3.32 (affected). Source: CNA: VulDB

## Severity and prioritization

- CVSS 4.0: 6.9 (medium); CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P; source: CNA: VulDB

- CVSS 3.1: 7.3 (high); CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R; source: CNA: VulDB

- CVSS 3.0: 7.3 (high); CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R; source: CNA: VulDB

- CVSS 2.0: 7.5 (high); AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR; source: CNA: VulDB

- CISA KEV: No listing in collected sources

- EPSS: Not available

- SSVC: Not available

- Weaknesses: CWE-121, CWE-119

## Exploit evidence

- exploit: https://gist.github.com/Ishanoshada/f6345a42a46e1345e6c7400aac311d77 (CNA: VulDB)

## References

- https://vuldb.com/vuln/429661 (CNA: VulDB; vdb-entry, technical-description)

- https://vuldb.com/vuln/429661/cti (CNA: VulDB; signature, permissions-required)

- https://vuldb.com/cve/CVE-2026-120336 (CNA: VulDB; third-party-advisory)

- https://vuldb.com/submit/1016301 (CNA: VulDB; third-party-advisory)

- https://gist.github.com/Ishanoshada/f6345a42a46e1345e6c7400aac311d77 (CNA: VulDB; exploit)

## Provenance

- CNA: VulDB: https://www.cve.org/CVERecord?id=CVE-2026-120336; retrieved 2026-11-02; source updated 2026-11-02

Revision: a7e947cf651be337c50eeb8c2bb6e4d2ecc940f7091aed4c7395c3a3e168deab

Canonical: https://y2.dev/cve/CVE-2026-120336