EUVD-2026-14463

A NULL pointer dereference in the daapreplyplaylists function src/httpddaap.c of owntone-server commit 3d1652d allows attackers to cause a Denial of Service DoS via sending a crafted DAAP request to the server...

CVE-2026-26828

The owntone-server media server is vulnerable to a NULL pointer dereference within the daap_reply_playlists function located in src/httpd_daap.c (specifically in commit 3d1652d ). This flaw allows an unauthenticated attacker to trigger a Denial of Service (DoS) by sending a specially crafted DAAP...