CVE-2026-2964 - higuma web-audio-recorder-js Dynamic Config Handling WebAudioRecorder.js extend prototype pollution

Back Back to CVE browser

LOW

higuma web-audio-recorder-js Dynamic Config Handling WebAudioRecorder.js extend prototype pollution

Published Feb 23, 2026

2.3

LOW

CVSS 4.0

EPSS 0.70%

Description

A vulnerability was identified in higuma web-audio-recorder-js 0.1/0.1.1. Impacted is the function extend in the library lib/WebAudioRecorder.js of the component Dynamic Config Handling. Such manipulation leads to improperly controlled modification of object prototype attributes. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitability is considered difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Vendor Higuma Product Web-Audio-Recorder-JS Default
n/a
- Version
  0.1
  Status
  affected
  Constraints
  -
- Version
  0.1.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Higuma

Web-Audio-Recorder-JS

n/a

Version	Status	Constraints
0.1	affected	-
0.1.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-1321

CWE-94

Code Injection

References (3)

https://vuldb.com/?ctiid.347331
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.347331
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.755221
exploitthird-party-advisoryThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://vuldb.com/?ctiid.347331		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.347331		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.755221		exploitthird-party-advisoryThird Party AdvisoryVDB Entry