CVE-2025-57156

The owntone-server media server is vulnerable to a NULL pointer dereference in the dacp_reply_playqueueedit_clear function located in src/httpd_dacp.c. This flaw exists in versions through commit 6d604a1 (newer than version 28.12). A remote attacker can exploit this vulnerability to cause a Denia...