Linux · 
Ubuntu · Package update · January 10, 2023
Ubuntu · Package update · January 10, 2023chromium-codecs-ffmpeg 109.0.5414.74-0ubuntu0.18.04.14: chromium-codecs-ffmpeg 109.0.5414.74-0ubuntu0.18.04.14 for Ubuntu 18.04.6 LTS (bionic)
chromium-codecs-ffmpeg 109.0.5414.74-0ubuntu0.18.04.14, released January 10, 2023, fixes 20 CVEs in chromium-codecs-ffmpeg. One of them is being exploited (CVE-2022-4262); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEVUnsupported product
CVEs closed
20
None rated Critical
Exploited
1
CVE-2022-4262
Highest CVSS
8.8
Base score, 0 to 10
Highest EPSS
0.2351
97th percentile
Priority of the 20 CVEs
Patch now 1
Urgent 0
High 12
Routine 7
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| chromium-codecs-ffmpeg | Ubuntu 18.04.6 LTS (bionic) | 109.0.5414.74-0ubuntu0.18.04.14 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2022-4262 | Chromium: CVE-2022-4262 Type Confusion in V8 | 8.8 | 0.2351 | KEVExploited |
| High | CVE-2023-0138 | Chromium:CVE-2023-0138: Heap buffer overflow in libphonenumber | 8.8 | 0.0075 | None reported |
| High | CVE-2022-4437 | Chromium: CVE-2022-4437 Use after free in Mojo IPC | 8.8 | 0.0070 | None reported |
| High | CVE-2022-4438 | Chromium: CVE-2022-4438 Use after free in Blink Frames | 8.8 | 0.0070 | None reported |
| High | CVE-2023-0136 | Chromium:CVE-2023-0136: Inappropriate implementation in Fullscreen API | 8.8 | 0.0069 | None reported |
| High | CVE-2022-4436 | Chromium: CVE-2022-4436 Use after free in Blink Media | 8.8 | 0.0067 | None reported |
| High | CVE-2022-4440 | Chromium: CVE-2022-4440 Use after free in Profiles | 8.8 | 0.0065 | None reported |
| High | CVE-2023-0128 | chromium: chromium - security update | 8.8 | 0.0064 | None reported |
| High | CVE-2022-4439 | Chromium: CVE-2022-4439 Use after free in Aura | 8.8 | 0.0064 | None reported |
| High | CVE-2023-0129 | Chromium:CVE-2023-0129: Heap buffer overflow in Network Service | 8.8 | 0.0054 | None reported |
| High | CVE-2023-0137 | chromium: Heap buffer overflow in Platform Apps in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed an attacker who co... | 8.8 | 0.0054 | None reported |
| High | CVE-2023-0134 | Chromium:CVE-2023-0134: Use after free in Cart | 8.8 | 0.0048 | None reported |
| High | CVE-2023-0135 | Chromium:CVE-2023-0135: Use after free in Cart | 8.8 | 0.0048 | None reported |
| Routine | CVE-2023-0141 | Chromium:CVE-2023-0141: Insufficient policy enforcement in CORS | 4.3 | 0.0064 | None reported |
| Routine | CVE-2023-0131 | Chromium:CVE-2023-0131: Inappropriate implementation in iframe Sandbox | 6.5 | 0.0063 | None reported |
| Routine | CVE-2023-0139 | Chromium:CVE-2023-0139: Insufficient validation of untrusted input in Downloads | 6.5 | 0.0063 | None reported |
| Routine | CVE-2023-0140 | Chromium:CVE-2023-0140: Inappropriate implementation in File System API | 6.5 | 0.0063 | None reported |
| Routine | CVE-2023-0130 | Chromium:CVE-2023-0130: Inappropriate implementation in Fullscreen API | 6.5 | 0.0060 | None reported |
| Routine | CVE-2023-0133 | Chromium:CVE-2023-0133: Inappropriate implementation in Permission prompts | 6.5 | 0.0060 | None reported |
| Routine | CVE-2023-0132 | Chromium:CVE-2023-0132: Inappropriate implementation in Permission prompts | 6.5 | 0.0053 | None reported |
Showing 1 to 20 of 20
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.