PT-2026-3656

Name of the Vulnerable Software and Affected Versions owntone-server commit b7e385f Description A flaw exists in owntone-server that can lead to a Denial of Service DoS. Specifically, a NULL pointer dereference is present in the dacp reply playqueueedit move function located in the src/httpd dacp...

CVE-2025-63648

The owntone-server media server is vulnerable to a NULL pointer dereference within the dacp_reply_playqueueedit_move function located in src/httpd_dacp.c (specifically in commit b7e385f ). This flaw allows an unauthenticated attacker to trigger a Denial of Service (DoS) condition by sending a spe...