VStarcam O-KAM Client DevDll_925.dll FUN_10003EA0 stack-based overflow
VStarcam O-KAM Client is exposed when it is connected to a P2P session with DevDll_925.dll present in its directory. CVSS rates it 6.9 (medium), and no fix is listed.
Written by anthropic/claude-haiku-5.5 from the sources below. Verify against them.
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- Published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- A 0-100 score for how much a CVE matters across the industry: exploitation, exposure, how widely the software is used, severity and whether a fix exists.What do these mean? →
- 34/100 · provisional
- How many real-world setups can hit the bug, from the vendor's advisory and CISA data. It does not know your setup.What do these mean? →
- Default setups
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
The VStarcam O-KAM Client software, specifically its DevDll_925.dll library, is affected by a flaw that can cause a memory overflow on the stack. An attacker could potentially exploit this remotely to disrupt the program or run malicious code on the affected system.
Read the original description
A vulnerability was found in VStarcam O-KAM Client 1.3.3.32. Affected by this vulnerability is the function FUN_10003EA0 in the library DevDll_925.dll. The manipulation results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
What to do
Check every install: default setups are affected.
Workaround: The facts list no workaround. The vulnerable code requires DevDll_925.dll and its dependency DLLs in the same directory, so removing them would remove that condition, though it may break the client's P2P functionality.
Timeline
- CVE published
- First seen by cve.now
Affected versions
- VStarcam O-KAM Client
1.3.3.32
Evidence 5
- Advisory
- Advisory
- Advisory
- Advisory
- Exploit
Corrections
None so far.
Something wrong on this page? Report an error. Every fix is listed here.
Questions about CVE-2026-120336
What does this mean?
The FUN_10003EA0 routine in DevDll_925.dll contains a stack buffer overflow. Attacker-controlled content is written past the saved return address, which gives control of execution and allows readable stack contents. The process is terminated on each attempt.Source: gist.github.com
Am I affected, and how do I check?
The affected setup is O-KAM Client with DevDll_925.dll and its dependency DLLs (P2PAPI.dll, PPCS_API.dll) in the same directory, while the application is connected to a P2P session. To check, look for DevDll_925.dll in the client's installation directory. The facts list no affected version range.Source: gist.github.com
What should I do about it?
The facts list no fixed version, so no upgrade target can be named. Check the vendor for an updated release before relying on any version.Source: gist.github.com
Is it being exploited?
It is not in CISA's Known Exploited Vulnerabilities catalog, and CISA's SSVC assessment does not mark exploitation as active. That does not mean it has not been attacked: vendors and researchers can report attacks before CISA lists them. No public exploit code is tracked.Source: cve.now feed data
What if there's no patch?
The facts list no workaround. The vulnerable code requires DevDll_925.dll and its dependency DLLs in the same directory, so removing them would remove that condition, though it may break the client's P2P functionality.Source: gist.github.com