O Kam Superipcam
Monthly
A use-after-free in the P2P session teardown handler of VStarcam O-KAM SuperIPCam 1.3.3.32 (SuperIPCam.exe, function FUN_005a2d44) allows remote, unauthenticated attackers who can reach the camera's P2P connectivity feature to corrupt memory during session teardown, producing a partial loss of confidentiality, integrity and availability consistent with a denial-of-service crash rather than confirmed code execution. Only version 1.3.3.32 is identified as affected, and the vendor was contacted about the disclosure but did not respond. A public PoC reference exists (a GitHub gist linked from the VulDB entry); it is not verified as working exploit code, and there is no CISA KEV listing or other confirmation of active exploitation.
A use-after-free in the P2P session teardown handler of VStarcam O-KAM SuperIPCam 1.3.3.32 (SuperIPCam.exe, function FUN_005a2d44) allows remote, unauthenticated attackers who can reach the camera's P2P connectivity feature to corrupt memory during session teardown, producing a partial loss of confidentiality, integrity and availability consistent with a denial-of-service crash rather than confirmed code execution. Only version 1.3.3.32 is identified as affected, and the vendor was contacted about the disclosure but did not respond. A public PoC reference exists (a GitHub gist linked from the VulDB entry); it is not verified as working exploit code, and there is no CISA KEV listing or other confirmation of active exploitation.