CVE-2025-63648 | owntone-server DACP Request src/httpd_dacp.c dacp_reply_playqueueedit_move null pointer dereference (Issue 1933)

A vulnerability was found in owntone-server. It has been rated as problematic. This issue affects the function dacp_reply_playqueueedit_move of the file src/httpd_dacp.c of the component DACP Request Handler. Performing a manipulation results in null pointer dereference.

This vulnerability is reported as CVE-2025-63648. The attack is possible to be carried out remotely. No exploit exists.

To fix this issue, it is recommended to deploy a patch.