# chromium-codecs-ffmpeg-extra 87.0.4280.66-0ubuntu0.18.04.1: chromium-codecs-ffmpeg-extra 87.0.4280.66-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic) chromium-codecs-ffmpeg-extra 87.0.4280.66-0ubuntu0.18.04.1, released January 8, 2021, fixes 22 CVEs in chromium-codecs-ffmpeg-extra. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported. - Web page: https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-extra-87.0.4280.66-0ubuntu0.18.04.1 - Platform: Linux - Released: Jan 8, 2021 - Priority: Routine (Closes 22 CVEs, none high severity) - CVEs: 22, exploited: 0, on CISA KEV: 0 ## Applies to | Product | Release | Fixed in | |---|---|---| | [chromium-codecs-ffmpeg-extra](https://patchblox.com/security/data/product/linux/chromium-codecs-ffmpeg-extra.md) | Ubuntu 18.04.6 LTS (bionic) | 87.0.4280.66-0ubuntu0.18.04.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2020-16012](https://patchblox.com/security/data/cve/CVE-2020-16012.md) | Routine | Firefox ESR and 1 other: Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote… | 4.3 | 0.0257 | | | [CVE-2020-16025](https://patchblox.com/security/data/cve/CVE-2020-16025.md) | Routine | chromium-browser: Heap buffer overflow in clipboard in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromise... | n/a | 0.0233 | | | [CVE-2020-16024](https://patchblox.com/security/data/cve/CVE-2020-16024.md) | Routine | chromium-browser: Heap buffer overflow in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the r... | n/a | 0.0195 | | | [CVE-2020-16014](https://patchblox.com/security/data/cve/CVE-2020-16014.md) | Routine | chromium-browser: Use after free in PPAPI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the rend... | n/a | 0.0114 | | | [CVE-2020-16015](https://patchblox.com/security/data/cve/CVE-2020-16015.md) | Routine | chromium-browser: Insufficient data validation in WASM in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially... | n/a | 0.0114 | | | [CVE-2020-16018](https://patchblox.com/security/data/cve/CVE-2020-16018.md) | Routine | chromium-browser: Use after free in payments in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the r... | n/a | 0.0114 | | | [CVE-2020-16026](https://patchblox.com/security/data/cve/CVE-2020-16026.md) | Routine | chromium-browser: Use after free in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap... | n/a | 0.0114 | | | [CVE-2020-16029](https://patchblox.com/security/data/cve/CVE-2020-16029.md) | Routine | chromium-browser: Inappropriate implementation in PDFium in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass nav... | n/a | 0.0108 | | | [CVE-2020-16023](https://patchblox.com/security/data/cve/CVE-2020-16023.md) | Routine | chromium-browser: Use after free in WebCodecs in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit h... | n/a | 0.0103 | | | [CVE-2020-16035](https://patchblox.com/security/data/cve/CVE-2020-16035.md) | Routine | chromium-browser: Insufficient data validation in cros-disks in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attack... | n/a | 0.0101 | | | [CVE-2020-16027](https://patchblox.com/security/data/cve/CVE-2020-16027.md) | Routine | chromium-browser: Insufficient policy enforcement in developer tools in Google Chrome prior to 87.0.4280.66 allowed an attacker who con... | n/a | 0.0096 | | | [CVE-2020-16028](https://patchblox.com/security/data/cve/CVE-2020-16028.md) | Routine | chromium-browser: Heap buffer overflow in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploi... | n/a | 0.0094 | | | [CVE-2020-16019](https://patchblox.com/security/data/cve/CVE-2020-16019.md) | Routine | chromium-browser: Inappropriate implementation in filesystem in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attack... | n/a | 0.0088 | | | [CVE-2020-16020](https://patchblox.com/security/data/cve/CVE-2020-16020.md) | Routine | chromium-browser: Inappropriate implementation in cryptohome in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attack... | n/a | 0.0087 | | | [CVE-2020-16022](https://patchblox.com/security/data/cve/CVE-2020-16022.md) | Routine | chromium-browser: Insufficient policy enforcement in networking in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to pot... | n/a | 0.0084 | | | [CVE-2020-16033](https://patchblox.com/security/data/cve/CVE-2020-16033.md) | Routine | chromium-browser: Inappropriate implementation in WebUSB in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof secu... | n/a | 0.0082 | | | [CVE-2020-16036](https://patchblox.com/security/data/cve/CVE-2020-16036.md) | Routine | chromium-browser: Inappropriate implementation in cookies in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass co... | n/a | 0.0077 | | | [CVE-2020-16030](https://patchblox.com/security/data/cve/CVE-2020-16030.md) | Routine | chromium-browser: Insufficient data validation in Blink in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to inject arbi... | n/a | 0.0075 | | | [CVE-2020-16031](https://patchblox.com/security/data/cve/CVE-2020-16031.md) | Routine | chromium-chromedriver: Insufficient data validation in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the cont... | n/a | 0.0070 | | | [CVE-2020-16032](https://patchblox.com/security/data/cve/CVE-2020-16032.md) | Routine | chromium-browser: Insufficient data validation in sharing in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the... | n/a | 0.0066 | | | [CVE-2020-16021](https://patchblox.com/security/data/cve/CVE-2020-16021.md) | Routine | chromium-browser: Race in image burner in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised... | n/a | 0.0064 | | | [CVE-2020-16034](https://patchblox.com/security/data/cve/CVE-2020-16034.md) | Routine | chromium-browser: Inappropriate implementation in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a local attacker to bypass poli... | n/a | 0.0057 | | --- Data as of 2026-11-13T14:02:24Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.