CVE-2025-63647 | owntone-server DAAP Request src/httpd_daap.c parse_meta null pointer dereference

A vulnerability identified as problematic has been detected in owntone-server. The affected element is the function parse_meta of the file src/httpd_daap.c of the component DAAP Request Handler. The manipulation leads to null pointer dereference.

This vulnerability is traded as CVE-2025-63647. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

Applying a patch is the recommended action to fix this issue.