A vulnerability identified as problematic has been detected in owntone-server. The affected element is the function
parse_meta of the file src/httpd_daap.c of the component DAAP Request Handler. The manipulation leads to null pointer dereference.
This vulnerability is traded as CVE-2025-63647. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
Applying a patch is the recommended action to fix this issue.
