An improper deallocation of system resources in the FFmpeg zmqsend command causes a denial of service when the tool processes a maliciously crafted input file. The flaw leads to resource exhaustion, reflected in CWE‑400 and CWE‑772, and can make the host system unstable or crash when the tool is invoked.

The vulnerability exists in the tools/zmqsend.c component of FFmpeg version 8.0.1, and only that specific release is listed as affected.

The CVSS score of 7.5 indicates moderate to high impact, and the vulnerability is not yet indexed as a known exploited variant in the KEV catalog. Exploitation requires that an attacker can run zmqsend with a crafted input; therefore the attack vector is most likely local or associated with a privileged service that uses the tool. If zmqsend is executed by a non‑privileged process, the DoS impact would be limited to that process, but if run as root or a daemon the system could become inoperable.