# chromium-codecs-ffmpeg 67.0.3396.99-0ubuntu0.18.04.1: chromium-codecs-ffmpeg 67.0.3396.99-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic) chromium-codecs-ffmpeg 67.0.3396.99-0ubuntu0.18.04.1, released November 2, 2021, fixes 26 CVEs in chromium-codecs-ffmpeg. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported. - Web page: https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-67.0.3396.99-0ubuntu0.18.04.1 - Platform: Linux - Released: Nov 2, 2021 - Priority: Routine (Closes 26 CVEs, none high severity) - CVEs: 26, exploited: 0, on CISA KEV: 0 ## Applies to | Product | Release | Fixed in | |---|---|---| | [chromium-codecs-ffmpeg](https://patchblox.com/security/data/product/linux/chromium-codecs-ffmpeg.md) | Ubuntu 18.04.6 LTS (bionic) | 67.0.3396.99-0ubuntu0.18.04.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2018-6126](https://patchblox.com/security/data/cve/CVE-2018-6126.md) | Routine | chromium-browser: A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bound... | n/a | 0.0767 | | | [CVE-2018-6130](https://patchblox.com/security/data/cve/CVE-2018-6130.md) | Routine | chromium-browser: Incorrect handling of object lifetimes in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to... | n/a | 0.0271 | | | [CVE-2018-6129](https://patchblox.com/security/data/cve/CVE-2018-6129.md) | Routine | chromium-browser: Out of bounds array access in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially... | n/a | 0.0271 | | | [CVE-2018-6140](https://patchblox.com/security/data/cve/CVE-2018-6140.md) | Routine | chromium-browser: Allowing the chrome.debugger API to attach to Web UI pages in DevTools in Google Chrome prior to 67.0.3396.62 allowed... | n/a | 0.0264 | | | [CVE-2018-6124](https://patchblox.com/security/data/cve/CVE-2018-6124.md) | Routine | chromium-codecs-ffmpeg: Type confusion in ReadableStreams in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potent... | n/a | 0.0193 | | | [CVE-2018-6139](https://patchblox.com/security/data/cve/CVE-2018-6139.md) | Routine | chromium-browser: Insufficient target checks on the chrome.debugger API in DevTools in Google Chrome prior to 67.0.3396.62 allowed an a... | n/a | 0.0192 | | | [CVE-2018-6137](https://patchblox.com/security/data/cve/CVE-2018-6137.md) | Routine | chromium-codecs-ffmpeg-extra: CSS Paint API in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to leak cross-origin data via... | n/a | 0.0190 | | | [CVE-2018-6123](https://patchblox.com/security/data/cve/CVE-2018-6123.md) | Routine | chromium-browser: A use after free in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially exploit hea... | n/a | 0.0188 | | | [CVE-2018-6127](https://patchblox.com/security/data/cve/CVE-2018-6127.md) | Routine | chromium-browser: Early free of object in use in IndexDB in Google Chrome prior to 67.0.3396.62 allowed a remote attacker who had compr... | n/a | 0.0179 | | | [CVE-2018-6141](https://patchblox.com/security/data/cve/CVE-2018-6141.md) | Routine | chromium-browser: Insufficient validation of an image filter in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker w... | n/a | 0.0167 | | | [CVE-2018-6143](https://patchblox.com/security/data/cve/CVE-2018-6143.md) | Routine | chromium-browser: Insufficient validation in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of b... | n/a | 0.0160 | | | [CVE-2018-6144](https://patchblox.com/security/data/cve/CVE-2018-6144.md) | Routine | chromium-browser: Off-by-one error in PDFium in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of boun... | n/a | 0.0151 | | | [CVE-2018-6135](https://patchblox.com/security/data/cve/CVE-2018-6135.md) | Routine | chromium-browser: Lack of clearing the previous site before loading alerts from a new one in Blink in Google Chrome prior to 67.0.3396.... | n/a | 0.0143 | | | [CVE-2018-6133](https://patchblox.com/security/data/cve/CVE-2018-6133.md) | Routine | chromium-browser: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 67.0.3396.62 allowed a remote... | n/a | 0.0142 | | | [CVE-2018-6131](https://patchblox.com/security/data/cve/CVE-2018-6131.md) | Routine | chromium-browser: Object lifecycle issue in WebAssembly in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially... | n/a | 0.0088 | | | [CVE-2018-6128](https://patchblox.com/security/data/cve/CVE-2018-6128.md) | Routine | chromium-browser: Incorrect URL parsing in WebKit in Google Chrome on iOS prior to 67.0.3396.62 allowed a remote attacker to perform do... | n/a | 0.0088 | | | [CVE-2018-6132](https://patchblox.com/security/data/cve/CVE-2018-6132.md) | Routine | chromium-browser: Uninitialized data in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to obtain potentially s... | n/a | 0.0087 | | | [CVE-2018-6134](https://patchblox.com/security/data/cve/CVE-2018-6134.md) | Routine | chromium-browser: Information leak in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to bypass no-referrer poli... | n/a | 0.0085 | | | [CVE-2018-6142](https://patchblox.com/security/data/cve/CVE-2018-6142.md) | Routine | chromium-browser: Array bounds check failure in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out o... | n/a | 0.0083 | | | [CVE-2018-6136](https://patchblox.com/security/data/cve/CVE-2018-6136.md) | Routine | chromium-browser: Missing type check in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds... | n/a | 0.0075 | | | [CVE-2018-6149](https://patchblox.com/security/data/cve/CVE-2018-6149.md) | Routine | chromium-browser: Type confusion in JavaScript in Google Chrome prior to 67.0.3396.87 allowed a remote attacker to perform an out of bo... | n/a | 0.0072 | | | [CVE-2018-6145](https://patchblox.com/security/data/cve/CVE-2018-6145.md) | Routine | chromium-browser: Insufficient data validation in HTML parser in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to bypas... | n/a | 0.0071 | | | [CVE-2018-6148](https://patchblox.com/security/data/cve/CVE-2018-6148.md) | Routine | chromium-browser: Incorrect implementation in Content Security Policy in Google Chrome prior to 67.0.3396.79 allowed a remote attacker... | n/a | 0.0069 | | | [CVE-2018-6138](https://patchblox.com/security/data/cve/CVE-2018-6138.md) | Routine | chromium-browser: Insufficient policy enforcement in Extensions API in Google Chrome prior to 67.0.3396.62 allowed an attacker who conv... | n/a | 0.0063 | | | [CVE-2018-6125](https://patchblox.com/security/data/cve/CVE-2018-6125.md) | Routine | chromium-browser: Insufficient policy enforcement in USB in Google Chrome on Windows prior to 67.0.3396.62 allowed a remote attacker to... | n/a | 0.0063 | | | [CVE-2018-6147](https://patchblox.com/security/data/cve/CVE-2018-6147.md) | Routine | chromium-browser: Lack of secure text entry mode in Browser UI in Google Chrome on Mac prior to 67.0.3396.62 allowed a local attacker t... | n/a | 0.0042 | | --- Data as of 2026-11-13T14:02:24Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.