# chromium-codecs-ffmpeg 103.0.5060.134-0ubuntu0.18.04.1: chromium-codecs-ffmpeg 103.0.5060.134-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic) chromium-codecs-ffmpeg 103.0.5060.134-0ubuntu0.18.04.1, released July 27, 2022, fixes 46 CVEs in chromium-codecs-ffmpeg. One of them is being exploited (CVE-2022-2294); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported. - Web page: https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-103.0.5060.134-0ubuntu0.18.04.1 - Platform: Linux - Released: Jul 27, 2022 - Priority: Patch now (Closes CVE-2022-2294, exploited (CISA KEV, ransomware)) - CVEs: 46, exploited: 1, on CISA KEV: 1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [chromium-codecs-ffmpeg](https://patchblox.com/security/data/product/linux/chromium-codecs-ffmpeg.md) | Ubuntu 18.04.6 LTS (bionic) | 103.0.5060.134-0ubuntu0.18.04.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2022-2294](https://patchblox.com/security/data/cve/CVE-2022-2294.md) | Patch now | Chromium: CVE-2022-2294 Heap buffer overflow in WebRTC | 8.8 | 0.7083 | CISA KEV, Ransomware | | [CVE-2022-2010](https://patchblox.com/security/data/cve/CVE-2022-2010.md) | Urgent | Chromium: CVE-2022-2010 Out of bounds read in compositing | 9.3 | 0.0126 | | | [CVE-2022-1853](https://patchblox.com/security/data/cve/CVE-2022-1853.md) | Urgent | Chromium: CVE-2022-1853 Use after free in Indexed DB | 9.6 | 0.0107 | | | [CVE-2022-2480](https://patchblox.com/security/data/cve/CVE-2022-2480.md) | High | Chromium: CVE-2022-2480 Use after free in Service Worker API | 8.8 | 0.1884 | | | [CVE-2022-2415](https://patchblox.com/security/data/cve/CVE-2022-2415.md) | High | chromium: Heap buffer overflow in WebGL in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploi... | 8.8 | 0.0198 | | | [CVE-2022-2156](https://patchblox.com/security/data/cve/CVE-2022-2156.md) | High | Chromium: CVE-2022-2156 Use after free in Base | 8.8 | 0.0153 | | | [CVE-2022-2295](https://patchblox.com/security/data/cve/CVE-2022-2295.md) | High | Chromium: CVE-2022-2295 Type Confusion in V8 | 8.8 | 0.0146 | | | [CVE-2022-2162](https://patchblox.com/security/data/cve/CVE-2022-2162.md) | High | Chromium: CVE-2022-2162 Insufficient policy enforcement in File System API | 8.8 | 0.0130 | | | [CVE-2022-2481](https://patchblox.com/security/data/cve/CVE-2022-2481.md) | High | Chromium: CVE-2022-2481 Use after free in Views | 8.8 | 0.0121 | | | [CVE-2022-2296](https://patchblox.com/security/data/cve/CVE-2022-2296.md) | High | chromium: Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 103.0.5060.114 allowed a remote attacker who... | 8.8 | 0.0115 | | | [CVE-2022-2011](https://patchblox.com/security/data/cve/CVE-2022-2011.md) | High | Chromium: CVE-2022-2011 Use after free in ANGLE | 8.8 | 0.0111 | | | [CVE-2022-2008](https://patchblox.com/security/data/cve/CVE-2022-2008.md) | High | Chromium: CVE-2022-2008 Out of bounds memory access in WebGL | 8.8 | 0.0108 | | | [CVE-2022-2158](https://patchblox.com/security/data/cve/CVE-2022-2158.md) | High | Chromium: CVE-2022-2158 Type Confusion in V8 | 8.8 | 0.0106 | | | [CVE-2022-2007](https://patchblox.com/security/data/cve/CVE-2022-2007.md) | High | Chromium: CVE-2022-2007 Use after free in WebGPU | 8.8 | 0.0105 | | | [CVE-2022-2157](https://patchblox.com/security/data/cve/CVE-2022-2157.md) | High | Chromium: CVE-2022-2157 Use after free in Interest groups | 8.8 | 0.0103 | | | [CVE-2022-2161](https://patchblox.com/security/data/cve/CVE-2022-2161.md) | High | Chromium: CVE-2022-2161 Use after free in WebApp Provider | 8.8 | 0.0101 | | | [CVE-2022-1855](https://patchblox.com/security/data/cve/CVE-2022-1855.md) | High | Chromium: CVE-2022-1855 Use after free in Messaging | 8.8 | 0.0094 | | | [CVE-2022-1874](https://patchblox.com/security/data/cve/CVE-2022-1874.md) | High | Chromium: CVE-2022-1874 Insufficient policy enforcement in Safe Browsing | 8.8 | 0.0094 | | | [CVE-2022-1854](https://patchblox.com/security/data/cve/CVE-2022-1854.md) | High | Chromium: CVE-2022-1854 Use after free in ANGLE | 8.8 | 0.0090 | | | [CVE-2022-2478](https://patchblox.com/security/data/cve/CVE-2022-2478.md) | High | Chromium: CVE-2022-2478 Use after free in PDF | 8.8 | 0.0090 | | | [CVE-2022-1857](https://patchblox.com/security/data/cve/CVE-2022-1857.md) | High | Chromium: CVE-2022-1857 Insufficient policy enforcement in File System API | 8.8 | 0.0087 | | | [CVE-2022-1866](https://patchblox.com/security/data/cve/CVE-2022-1866.md) | High | chromium: Use after free in Tablet Mode in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who conv... | 8.8 | 0.0087 | | | [CVE-2022-2477](https://patchblox.com/security/data/cve/CVE-2022-2477.md) | High | Chromium: CVE-2022-2477 Use after free in Guest View | 8.8 | 0.0087 | | | [CVE-2022-1859](https://patchblox.com/security/data/cve/CVE-2022-1859.md) | High | Chromium: CVE-2022-1859 Use after free in Performance Manager | 8.8 | 0.0085 | | | [CVE-2022-2163](https://patchblox.com/security/data/cve/CVE-2022-2163.md) | High | Chromium: CVE-2022-2163 Use after free in Cast UI and Toolbar | 8.8 | 0.0084 | | | [CVE-2022-1860](https://patchblox.com/security/data/cve/CVE-2022-1860.md) | High | chromium: Use after free in UI Foundations in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who c... | 8.8 | 0.0083 | | | [CVE-2022-1861](https://patchblox.com/security/data/cve/CVE-2022-1861.md) | High | chromium: Use after free in Sharing in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who convince... | 8.8 | 0.0083 | | | [CVE-2022-1876](https://patchblox.com/security/data/cve/CVE-2022-1876.md) | High | Chromium: CVE-2022-1876 Heap buffer overflow in DevTools | 8.8 | 0.0074 | | | [CVE-2022-1870](https://patchblox.com/security/data/cve/CVE-2022-1870.md) | High | Chromium: CVE-2022-1870 Use after free in App Service | 8.8 | 0.0062 | | | [CVE-2022-1856](https://patchblox.com/security/data/cve/CVE-2022-1856.md) | High | Chromium: CVE-2022-1856 Use after free in User Education | 8.8 | 0.0061 | | | [CVE-2022-1863](https://patchblox.com/security/data/cve/CVE-2022-1863.md) | High | Chromium: CVE-2022-1863 Use after free in Tab Groups | 8.8 | 0.0058 | | | [CVE-2022-1864](https://patchblox.com/security/data/cve/CVE-2022-1864.md) | High | Chromium: CVE-2022-1864 Use after free in WebApp Installs | 8.8 | 0.0058 | | | [CVE-2022-1865](https://patchblox.com/security/data/cve/CVE-2022-1865.md) | High | Chromium: CVE-2022-1865 Use after free in Bookmarks | 8.8 | 0.0058 | | | [CVE-2022-1873](https://patchblox.com/security/data/cve/CVE-2022-1873.md) | Routine | Chromium: CVE-2022-1873 Insufficient policy enforcement in COOP | 6.5 | 0.0102 | | | [CVE-2022-1869](https://patchblox.com/security/data/cve/CVE-2022-1869.md) | Routine | Chromium: CVE-2022-1869 Type Confusion in V8 | 6.5 | 0.0098 | | | [CVE-2022-2165](https://patchblox.com/security/data/cve/CVE-2022-2165.md) | Routine | Chromium: CVE-2022-2165 Insufficient data validation in URL formatting | 4.3 | 0.0089 | | | [CVE-2022-1867](https://patchblox.com/security/data/cve/CVE-2022-1867.md) | Routine | Chromium: CVE-2022-1867 Insufficient validation of untrusted input in Data Transfer | 6.5 | 0.0088 | | | [CVE-2022-2479](https://patchblox.com/security/data/cve/CVE-2022-2479.md) | Routine | Chromium: CVE-2022-2479 Insufficient validation of untrusted input in File | 4.3 | 0.0084 | | | [CVE-2022-1858](https://patchblox.com/security/data/cve/CVE-2022-1858.md) | Routine | Chromium: CVE-2022-1858 Out of bounds read in DevTools | 6.5 | 0.0083 | | | [CVE-2022-1875](https://patchblox.com/security/data/cve/CVE-2022-1875.md) | Routine | Chromium: CVE-2022-1875 Inappropriate implementation in PDF | 4.3 | 0.0082 | | | [CVE-2022-2160](https://patchblox.com/security/data/cve/CVE-2022-2160.md) | Routine | Chromium: CVE-2022-2160 Insufficient policy enforcement in DevTools | 6.5 | 0.0072 | | | [CVE-2022-2164](https://patchblox.com/security/data/cve/CVE-2022-2164.md) | Routine | Chromium: CVE-2022-2164 Inappropriate implementation in Extensions API | 6.3 | 0.0067 | | | [CVE-2022-1868](https://patchblox.com/security/data/cve/CVE-2022-1868.md) | Routine | Chromium: CVE-2022-1868 Inappropriate implementation in Extensions API | 6.5 | 0.0060 | | | [CVE-2022-1862](https://patchblox.com/security/data/cve/CVE-2022-1862.md) | Routine | Chromium: CVE-2022-1862 Inappropriate implementation in Extensions | 6.5 | 0.0059 | | | [CVE-2022-1871](https://patchblox.com/security/data/cve/CVE-2022-1871.md) | Routine | Chromium: CVE-2022-1871 Insufficient policy enforcement in File System API | 4.3 | 0.0058 | | | [CVE-2022-1872](https://patchblox.com/security/data/cve/CVE-2022-1872.md) | Routine | Chromium: CVE-2022-1872 Insufficient policy enforcement in Extensions API | 4.3 | 0.0058 | | --- Data as of 2026-11-13T14:02:24Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.