SUSE CVE-2025-57156

NULL pointer dereference in the dacpreplyplayqueueeditclear function in src/httpddacp.c in owntone-server through commit 6d604a1 newer commit after version 28.12 allows remote attackers to cause a Denial of Service crash...

SUSE CVE-2025-63648

A NULL pointer dereference in the dacpreplyplayqueueeditmove function src/httpddacp.c of owntone-server commit b7e385f allows attackers to cause a Denial of Service DoS via sending a crafted DACP request to the server...

CVE-2025-57156

NULL pointer dereference in the dacpreplyplayqueueeditclear function in src/httpddacp.c in owntone-server through commit 6d604a1 newer commit after version 28.12 allows remote attackers to cause a Denial of Service crash...

PT-2026-3656

A NULL pointer dereference in the dacp reply playqueueedit move function src/httpd dacp.c of owntone-server commit b7e385f allows attackers to cause a Denial of Service DoS via sending a crafted DACP request to the server...

CVE-2025-63648

A NULL pointer dereference in the dacpreplyplayqueueeditmove function src/httpddacp.c of owntone-server commit b7e385f allows attackers to cause a Denial of Service DoS via sending a crafted DACP request to the server...

PT-2026-3654

Name of the Vulnerable Software and Affected Versions owntone-server versions prior to the commit 6d604a1 Description A flaw exists in owntone-server due to a NULL pointer dereference within the dacp reply playqueueedit clear function, located in the src/httpd dacp.c file. This issue, present...

CVE-2025-57156

NULL pointer dereference in the dacpreplyplayqueueeditclear function in src/httpddacp.c in owntone-server through commit 6d604a1 newer commit after version 28.12 allows remote attackers to cause a Denial of Service crash...

CVE-2025-57156

The owntone-server , an open-source Linux/FreeBSD media server (DAAP, MPD, and RSP), contains a NULL pointer dereference vulnerability in the dacp_reply_playqueueedit_clear function within the src/httpd_dacp.c file. This flaw is present in versions through commit 6d604a1 (newer commits after vers...

CVE-2025-63648

The owntone-server media server is vulnerable to a NULL pointer dereference in the dacp_reply_playqueueedit_move function located in src/httpd_dacp.c (specifically in commit b7e385f ). An attacker can exploit this flaw by sending a crafted DACP request to the server, resulting in a Denial of Serv...