High severity7.5NVD Advisory· Published Apr 13, 2026· Updated Apr 23, 2026

CVE-2026-30998

Description

An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

FFmpeg/Ffmpeg2 versions
cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*range: <=8.0.1
- (no CPE)range: = 8.0.1
osv-coords2 versions
pkg:apk/chainguard/ffmpeg-8.0 pkg:apk/wolfi/ffmpeg-8.0
< 8.0.2-r0+ 1 more
- (no CPE)range: < 8.0.2-r0
- (no CPE)range: < 8.0.2-r0

Patches

Vulnerability mechanics

References

excellent-oatmeal-319.notion.site/CVE-2026-30998-Resource-Leak-3265a71f9cca4dc58df4632ce8b60a50nvdExploitThird Party Advisory
ffmpeg.org/doxygen/7.0/zmqsend_8c_source.htmlnvdProduct
github.com/FFmpeg/FFmpeg/blob/master/tools/zmqsend.cnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000