NULL pointer dereference in the dacp_reply_playqueueedit_clear function in src/httpd_dacp.c in owntone-server through commit 6d604a1 (newer commit after version 28.12) allows remote attackers to cause a Denial of Service (crash).
Metrics
Affected Vendors & Products
References
History
Tue, 20 Jan 2026 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | NULL pointer dereference in the dacp_reply_playqueueedit_clear function in src/httpd_dacp.c in owntone-server through commit 6d604a1 (newer commit after version 28.12) allows remote attackers to cause a Denial of Service (crash). | |
| References |
|
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-01-20T21:01:50.003Z
Reserved: 2025-08-17T00:00:00.000Z
Link: CVE-2025-57156
No data.
Status : Received
Published: 2026-01-20T21:16:03.790
Modified: 2026-01-20T21:16:03.790
Link: CVE-2025-57156
No data.
OpenCVE Enrichment
No data.