# chromium-codecs-ffmpeg 107.0.5304.87-0ubuntu11.18.04.1: chromium-codecs-ffmpeg 107.0.5304.87-0ubuntu11.18.04.1 for Ubuntu 18.04.6 LTS (bionic)

chromium-codecs-ffmpeg 107.0.5304.87-0ubuntu11.18.04.1, released January 2, 2023, fixes 44 CVEs in chromium-codecs-ffmpeg. One of them is being exploited (CVE-2022-3723); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

- Web page: https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-107.0.5304.87-0ubuntu11.18.04.1
- Platform: Linux
- Released: Jan 2, 2023
- Priority: Patch now (Closes CVE-2022-3723, exploited (CISA KEV))
- CVEs: 44, exploited: 1, on CISA KEV: 1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [chromium-codecs-ffmpeg](https://patchblox.com/security/data/product/linux/chromium-codecs-ffmpeg.md) | Ubuntu 18.04.6 LTS (bionic) | 107.0.5304.87-0ubuntu11.18.04.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2022-3723](https://patchblox.com/security/data/cve/CVE-2022-3723.md) | Patch now | Chromium: CVE-2022-3723 Type Confusion in V8 | 8.8 | 0.0792 | CISA KEV |
| [CVE-2022-3654](https://patchblox.com/security/data/cve/CVE-2022-3654.md) | High | Chromium: CVE-2022-3654 Use after free in Layout | 8.8 | 0.2380 |  |
| [CVE-2022-3842](https://patchblox.com/security/data/cve/CVE-2022-3842.md) | High | chromium: Use after free in Passwords in Google Chrome prior to 105.0.5195.125 allowed a remote attacker who had compromised th... | 7.5 | 0.1833 |  |
| [CVE-2022-3656](https://patchblox.com/security/data/cve/CVE-2022-3656.md) | High | Chromium: CVE-2022-3656 Insufficient data validation in File System | 8.8 | 0.0253 |  |
| [CVE-2022-3199](https://patchblox.com/security/data/cve/CVE-2022-3199.md) | High | Chromium: CVE-2022-3199 Use after free in Frames | 8.8 | 0.0242 |  |
| [CVE-2022-3195](https://patchblox.com/security/data/cve/CVE-2022-3195.md) | High | Chromium: CVE-2022-3195 Out of bounds write in Storage | 8.8 | 0.0129 |  |
| [CVE-2022-3196](https://patchblox.com/security/data/cve/CVE-2022-3196.md) | High | Chromium: CVE-2022-3196 Use after free in PDF | 8.8 | 0.0109 |  |
| [CVE-2022-3197](https://patchblox.com/security/data/cve/CVE-2022-3197.md) | High | Chromium: CVE-2022-3197 Use after free in PDF | 8.8 | 0.0108 |  |
| [CVE-2022-3446](https://patchblox.com/security/data/cve/CVE-2022-3446.md) | High | Chromium: CVE-2022-3446 Heap buffer overflow in WebSQL | 8.8 | 0.0101 |  |
| [CVE-2022-3370](https://patchblox.com/security/data/cve/CVE-2022-3370.md) | High | Chromium: CVE-2022-3370 Use after free in Custom Elements | 8.8 | 0.0099 |  |
| [CVE-2022-3373](https://patchblox.com/security/data/cve/CVE-2022-3373.md) | High | Chromium: CVE-2022-3373 Out of bounds write in V8 | 8.8 | 0.0099 |  |
| [CVE-2022-3652](https://patchblox.com/security/data/cve/CVE-2022-3652.md) | High | Chromium: CVE-2022-3652 Type Confusion in V8 | 8.8 | 0.0092 |  |
| [CVE-2022-3445](https://patchblox.com/security/data/cve/CVE-2022-3445.md) | High | Chromium: CVE-2022-3445 Use after free in Skia | 8.8 | 0.0091 |  |
| [CVE-2022-3200](https://patchblox.com/security/data/cve/CVE-2022-3200.md) | High | Chromium: CVE-2022-3200 Heap buffer overflow in Internals | 8.8 | 0.0088 |  |
| [CVE-2022-3653](https://patchblox.com/security/data/cve/CVE-2022-3653.md) | High | Chromium: CVE-2022-3653 Heap buffer overflow in Vulkan | 8.8 | 0.0083 |  |
| [CVE-2022-3308](https://patchblox.com/security/data/cve/CVE-2022-3308.md) | High | Chromium: CVE-2022-3308 Insufficient policy enforcement in Developer Tools | 7.4 | 0.0083 |  |
| [CVE-2022-3448](https://patchblox.com/security/data/cve/CVE-2022-3448.md) | High | Chromium: CVE-2022-3448 Use after free in Permissions API | 8.8 | 0.0082 |  |
| [CVE-2022-3304](https://patchblox.com/security/data/cve/CVE-2022-3304.md) | High | Chromium: CVE-2022-3304 Use after free in CSS | 8.8 | 0.0082 |  |
| [CVE-2022-3450](https://patchblox.com/security/data/cve/CVE-2022-3450.md) | High | Chromium: CVE-2022-3450 Use after free in Peer Connection | 8.8 | 0.0080 |  |
| [CVE-2022-3198](https://patchblox.com/security/data/cve/CVE-2022-3198.md) | High | Chromium: CVE-2022-3198 Use after free in PDF | 8.8 | 0.0078 |  |
| [CVE-2022-3306](https://patchblox.com/security/data/cve/CVE-2022-3306.md) | High | chromium: Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially... | 8.8 | 0.0074 |  |
| [CVE-2022-3307](https://patchblox.com/security/data/cve/CVE-2022-3307.md) | High | Chromium: CVE-2022-3307 Use after free in Media | 8.8 | 0.0074 |  |
| [CVE-2022-3315](https://patchblox.com/security/data/cve/CVE-2022-3315.md) | High | Chromium: CVE-2022-3315 Type confusion in Blink | 8.8 | 0.0073 |  |
| [CVE-2022-3305](https://patchblox.com/security/data/cve/CVE-2022-3305.md) | High | chromium: Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially... | 8.8 | 0.0072 |  |
| [CVE-2022-3659](https://patchblox.com/security/data/cve/CVE-2022-3659.md) | High | chromium: Use after free in Accessibility in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed a remote attacker who co... | 8.8 | 0.0066 |  |
| [CVE-2022-3658](https://patchblox.com/security/data/cve/CVE-2022-3658.md) | High | chromium: Use after free in Feedback service on Chrome OS in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed an attac... | 8.8 | 0.0056 |  |
| [CVE-2022-3655](https://patchblox.com/security/data/cve/CVE-2022-3655.md) | High | Chromium: CVE-2022-3655 Heap buffer overflow in Media Galleries | 8.8 | 0.0055 |  |
| [CVE-2022-3449](https://patchblox.com/security/data/cve/CVE-2022-3449.md) | High | Chromium: CVE-2022-3449 Use after free in Safe Browsing | 8.8 | 0.0052 |  |
| [CVE-2022-3657](https://patchblox.com/security/data/cve/CVE-2022-3657.md) | High | Chromium: CVE-2022-3657 Use after free in Extensions | 8.8 | 0.0049 |  |
| [CVE-2022-3443](https://patchblox.com/security/data/cve/CVE-2022-3443.md) | Routine | chromium: Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to... | 4.3 | 0.0091 |  |
| [CVE-2022-3444](https://patchblox.com/security/data/cve/CVE-2022-3444.md) | Routine | chromium: Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to... | 4.3 | 0.0088 |  |
| [CVE-2022-3201](https://patchblox.com/security/data/cve/CVE-2022-3201.md) | Routine | chromium: chromium - security update | 5.4 | 0.0082 |  |
| [CVE-2022-3447](https://patchblox.com/security/data/cve/CVE-2022-3447.md) | Routine | Chromium: CVE-2022-3447 Inappropriate implementation in Custom Tabs | 4.3 | 0.0081 |  |
| [CVE-2022-3313](https://patchblox.com/security/data/cve/CVE-2022-3313.md) | Routine | Chromium: CVE-2022-3313 Incorrect security UI in Full Screen | 6.5 | 0.0075 |  |
| [CVE-2022-3317](https://patchblox.com/security/data/cve/CVE-2022-3317.md) | Routine | Chromium: CVE-2022-3317 Insufficient validation of untrusted input in Intents | 4.3 | 0.0072 |  |
| [CVE-2022-3311](https://patchblox.com/security/data/cve/CVE-2022-3311.md) | Routine | Chromium: CVE-2022-3311 Use after free in Import | 6.5 | 0.0072 |  |
| [CVE-2022-3309](https://patchblox.com/security/data/cve/CVE-2022-3309.md) | Routine | chromium: Use after free in assistant in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinc... | 6.5 | 0.0070 |  |
| [CVE-2022-3660](https://patchblox.com/security/data/cve/CVE-2022-3660.md) | Routine | Chromium: CVE-2022-3660 Inappropriate implementation in Full screen mode | 4.3 | 0.0064 |  |
| [CVE-2022-3316](https://patchblox.com/security/data/cve/CVE-2022-3316.md) | Routine | Chromium: CVE-2022-3316 Insufficient validation of untrusted input in Safe Browsing | 4.3 | 0.0062 |  |
| [CVE-2022-3310](https://patchblox.com/security/data/cve/CVE-2022-3310.md) | Routine | Chromium: CVE-2022-3310 Insufficient policy enforcement in Custom Tabs | 6.5 | 0.0062 |  |
| [CVE-2022-3661](https://patchblox.com/security/data/cve/CVE-2022-3661.md) | Routine | Chromium: CVE-2022-3661 Insufficient data validation in Extensions | 4.3 | 0.0061 |  |
| [CVE-2022-3318](https://patchblox.com/security/data/cve/CVE-2022-3318.md) | Routine | chromium: Use after free in ChromeOS Notifications in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacke... | 4.3 | 0.0055 |  |
| [CVE-2022-3314](https://patchblox.com/security/data/cve/CVE-2022-3314.md) | Routine | chromium: Use after free in logging in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a Web... | 6.5 | 0.0054 |  |
| [CVE-2022-3312](https://patchblox.com/security/data/cve/CVE-2022-3312.md) | Routine | chromium: Insufficient validation of untrusted input in VPN in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a local... | 4.6 | 0.0026 |  |

---

Data as of 2026-11-13T20:04:13Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.