CVE-2025-63648

creationtimestamp| type| source ---|---|--- 2026-01-21 16:13:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcx2upm6cw2h...

CVE-2025-63648

A NULL pointer dereference in the dacpreplyplayqueueeditmove function src/httpddacp.c of owntone-server commit b7e385f allows attackers to cause a Denial of Service DoS via sending a crafted DACP request to the server...