A vulnerability categorized as problematic has been discovered in owntone-server up to 28.12. Impacted is the function
dacp_reply_playqueueedit_clear of the file src/httpd_dacp.c. Executing a manipulation can lead to null pointer dereference.
This vulnerability appears as CVE-2025-57156. The attack may be performed from remote. There is no available exploit.
It is advisable to implement a patch to correct this issue.
