CVE-2026-26829
HIGHowntone-server through c4d57aa - Denial of Service via NULL Pointer Dereference in safe_atou64
Title source: llmDescription
A NULL pointer dereference in the safe_atou64 function (src/misc.c) of owntone-server through commit c4d57aa allows attackers to cause a Denial of Service (DoS) via sending a series of crafted HTTP requests to the server.
References (3)
Core 3
Scores
CVSS v3
7.5
EPSS
0.0088
EPSS Percentile
54.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-476
Status
published
Published
Mar 23, 2026
Tracked Since
Mar 23, 2026