A vulnerability was found in higuma web-audio-recorder-js 0.1/0.1.1 and classified as problematic. Impacted is the function
extend in the library lib/WebAudioRecorder.js of the component Dynamic Config Handling. Such manipulation leads to improperly controlled modification of object prototype attributes.
This vulnerability is referenced as CVE-2026-2964. It is possible to launch the attack remotely. Furthermore, an exploit is available.
The vendor was contacted early about this disclosure but did not respond in any way.
