Linux · Ubuntu · Package update · November 29, 2022

chromium-codecs-ffmpeg-extra 108.0.5359.71-0ubuntu0.18.04.5: chromium-codecs-ffmpeg-extra 108.0.5359.71-0ubuntu0.18.04.5 for Ubuntu 18.04.6 LTS (bionic)

chromium-codecs-ffmpeg-extra 108.0.5359.71-0ubuntu0.18.04.5, released November 29, 2022, fixes 29 CVEs in chromium-codecs-ffmpeg-extra. One of them is being exploited (CVE-2022-4135); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVUnsupported product
CVEs closed
29
2 rated Critical
Exploited
1
CVE-2022-4135
Highest CVSS
9.6
Base score, 0 to 10
Highest EPSS
0.3186
98th percentile

Priority of the 29 CVEs

Patch now 1 Urgent 1 High 18 Routine 9

Fixed package versions

ProductReleaseFixed in
chromium-codecs-ffmpeg-extraUbuntu 18.04.6 LTS (bionic)108.0.5359.71-0ubuntu0.18.04.5

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Patch now CVE-2022-4135 Chromium: CVE-2022-4135 Heap buffer overflow in GPU9.6 0.3186 KEVExploited
Urgent CVE-2022-3890 Chromium: CVE-2022-3890 Heap buffer overflow in Crashpad9.6 0.0105 None reported
High CVE-2022-4178 Chromium: CVE-2022-4178 Use after free in Mojo8.8 0.2392 None reported
High CVE-2022-3885 Chromium: CVE-2022-3885 Use after free in V88.8 0.0098 None reported
High CVE-2022-4174 Chromium: CVE-2022-4174 Type Confusion in V88.8 0.0098 None reported
High CVE-2022-3887 Chromium: CVE-2022-3887 Use after free in Web Workers8.8 0.0094 None reported
High CVE-2022-3889 Chromium: CVE-2022-3889 Type Confusion in V88.8 0.0092 None reported
High CVE-2022-3886 Chromium: CVE-2022-3886 Use after free in Speech Recognition8.8 0.0091 None reported
High CVE-2022-3888 Chromium: CVE-2022-3888 Use after free in WebCodecs8.8 0.0089 None reported
High CVE-2022-4192 Chromium: CVE-2022-4192 Use after free in Live Caption8.8 0.0089 None reported
High CVE-2022-4190 Chromium: CVE-2022-4190 Insufficient data validation in Directory8.8 0.0083 None reported
High CVE-2022-4193 Chromium: CVE-2022-4193 Insufficient policy enforcement in File System API8.8 0.0083 None reported
High CVE-2022-4175 Chromium: CVE-2022-4175 Use after free in Camera Capture8.8 0.0076 None reported
High CVE-2022-4181 Chromium: CVE-2022-4181 Use after free in Forms8.8 0.0071 None reported
High CVE-2022-4194 Chromium: CVE-2022-4194 Use after free in Accessibility8.8 0.0069 None reported
High CVE-2022-4176 chromium: Out of bounds write in Lacros Graphics in Google Chrome on Chrome OS and Lacros prior to 108.0.5359.71 allowed a remo...8.8 0.0065 None reported
High CVE-2022-4191 Chromium: CVE-2022-4191 Use after free in Sign-In8.8 0.0062 None reported
High CVE-2022-4179 Chromium: CVE-2022-4179 Use after free in Audio8.8 0.0052 None reported
High CVE-2022-4177 Chromium: CVE-2022-4177 Use after free in Extensions8.8 0.0051 None reported
High CVE-2022-4180 Chromium: CVE-2022-4180 Use after free in Mojo8.8 0.0051 None reported
Routine CVE-2022-4185 Chromium: CVE-2022-4185 Inappropriate implementation in Navigation4.3 0.0096 None reported
Routine CVE-2022-4187 Chromium: CVE-2022-4187 Insufficient policy enforcement in DevTools6.5 0.0079 None reported
Routine CVE-2022-4184 Chromium: CVE-2022-4184 Insufficient policy enforcement in Autofill4.3 0.0079 None reported
Routine CVE-2022-4183 Chromium: CVE-2022-4183 Insufficient policy enforcement in Popup Blocker4.3 0.0069 None reported
Routine CVE-2022-4188 Chromium: CVE-2022-4188 Insufficient validation of untrusted input in CORS4.3 0.0060 None reported
Showing 1 to 25 of 29 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.