CVE-2025-63647
HIGH 7.5A NULL pointer dereference in the parse_meta function (src/httpd_daap.c) of owntone-server commit 334beb allows attackers to cause a Denial of Service (DoS) via sending a crafted DAAP request to the server.
Affected Applications in Environment
1
server
v1.0.0.0
1 device
Affected Devices
1
EBB107-01
Windows