Ziiiro

A use after free issue exists in the MP4Box component within the `gf mx v()` function of the `utils/os thread.c` file. This flaw allows a remote attacker to trigger the condition through specific manipulation.

A use after free issue exists in the MP4Box component within the `gf fq pop()` function of the `filter core/filter queue.c` file. This flaw allows a remote attacker to trigger the condition through specific manipulation. Use after free is a memory corruption flaw where an application continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution.

A null pointer dereference in Windows Redirected Drive Buffering allows an authorized attacker to cause a local denial of service, which can lead to system crashes or connection failures.

A flaw exists in lrzip that involves a use-after-free condition within the `lzma decompress buf` function located in the `stream.c` file. Local access is required for exploitation. The exploit has been publicly disclosed. The project maintainers were notified of the issue but have not yet responded.

A security issue exists in ckolivas lrzip. The `ucompthread` function within the `stream.c` file is susceptible to a null pointer dereference. This manipulation can be performed locally. The exploit for this issue has been publicly disclosed. The project maintainers were notified but have not yet responded.