# chromium-codecs-ffmpeg 100.0.4896.127-0ubuntu0.18.04.1: chromium-codecs-ffmpeg 100.0.4896.127-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic) chromium-codecs-ffmpeg 100.0.4896.127-0ubuntu0.18.04.1, released January 2, 2023, fixes 34 CVEs in chromium-codecs-ffmpeg. One of them is being exploited (CVE-2022-1364); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported. - Web page: https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-100.0.4896.127-0ubuntu0.18.04.1 - Platform: Linux - Released: Jan 2, 2023 - Priority: Patch now (Closes CVE-2022-1364, exploited (CISA KEV)) - CVEs: 34, exploited: 1, on CISA KEV: 1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [chromium-codecs-ffmpeg](https://patchblox.com/security/data/product/linux/chromium-codecs-ffmpeg.md) | Ubuntu 18.04.6 LTS (bionic) | 100.0.4896.127-0ubuntu0.18.04.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2022-1364](https://patchblox.com/security/data/cve/CVE-2022-1364.md) | Patch now | Chromium: CVE-2022-1364: Type Confusion in V8 | 8.8 | 0.1392 | CISA KEV | | [CVE-2022-1309](https://patchblox.com/security/data/cve/CVE-2022-1309.md) | Urgent | Chromium: CVE-2022-1309 Insufficient policy enforcement in developer tools | 9.6 | 0.0089 | | | [CVE-2022-1312](https://patchblox.com/security/data/cve/CVE-2022-1312.md) | Urgent | Chromium: CVE-2022-1312 Use after free in storage | 9.6 | 0.0064 | | | [CVE-2022-1232](https://patchblox.com/security/data/cve/CVE-2022-1232.md) | High | Chromium: CVE-2022-1232 Type Confusion in V8 | 8.8 | 0.1706 | | | [CVE-2022-1134](https://patchblox.com/security/data/cve/CVE-2022-1134.md) | High | Chromium: CVE-2022-1134 Type Confusion in V8 | 8.8 | 0.0186 | | | [CVE-2022-1310](https://patchblox.com/security/data/cve/CVE-2022-1310.md) | High | Chromium: CVE-2022-1310 Use after free in regular expressions | 8.8 | 0.0107 | | | [CVE-2022-1308](https://patchblox.com/security/data/cve/CVE-2022-1308.md) | High | Chromium: CVE-2022-1308 Use after free in BFCache | 8.8 | 0.0097 | | | [CVE-2022-1314](https://patchblox.com/security/data/cve/CVE-2022-1314.md) | High | Chromium: CVE-2022-1314 Type Confusion in V8 | 8.8 | 0.0097 | | | [CVE-2022-1125](https://patchblox.com/security/data/cve/CVE-2022-1125.md) | High | Chromium: CVE-2022-1125 Use after free in Portals | 8.8 | 0.0093 | | | [CVE-2022-1127](https://patchblox.com/security/data/cve/CVE-2022-1127.md) | High | Chromium: CVE-2022-1127 Use after free in QR Code Generator | 8.8 | 0.0092 | | | [CVE-2022-1131](https://patchblox.com/security/data/cve/CVE-2022-1131.md) | High | Chromium: CVE-2022-1131 Use after free in Cast UI | 8.8 | 0.0091 | | | [CVE-2022-1133](https://patchblox.com/security/data/cve/CVE-2022-1133.md) | High | Chromium: CVE-2022-1133 Use after free in WebRTC | 8.8 | 0.0091 | | | [CVE-2022-1313](https://patchblox.com/security/data/cve/CVE-2022-1313.md) | High | Chromium: CVE-2022-1313 Use after free in tab groups | 8.8 | 0.0091 | | | [CVE-2022-1305](https://patchblox.com/security/data/cve/CVE-2022-1305.md) | High | Chromium: CVE-2022-1305 Use after free in storage | 8.8 | 0.0090 | | | [CVE-2022-1311](https://patchblox.com/security/data/cve/CVE-2022-1311.md) | High | chromium: Use after free in shell in Google Chrome on ChromeOS prior to 100.0.4896.88 allowed a remote attacker to potentially... | 8.8 | 0.0090 | | | [CVE-2022-1135](https://patchblox.com/security/data/cve/CVE-2022-1135.md) | High | Chromium: CVE-2022-1135 Use after free in Shopping Cart | 8.8 | 0.0089 | | | [CVE-2022-1143](https://patchblox.com/security/data/cve/CVE-2022-1143.md) | High | Chromium: CVE-2022-1143 Heap buffer overflow in WebUI | 8.8 | 0.0089 | | | [CVE-2022-1141](https://patchblox.com/security/data/cve/CVE-2022-1141.md) | High | chromium: Use after free in File Manager in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user... | 8.8 | 0.0086 | | | [CVE-2022-1130](https://patchblox.com/security/data/cve/CVE-2022-1130.md) | High | Chromium: CVE-2022-1130 Insufficient validation of untrusted input in WebOTP | 8.1 | 0.0085 | | | [CVE-2022-1142](https://patchblox.com/security/data/cve/CVE-2022-1142.md) | High | chromium: Heap buffer overflow in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user... | 8.8 | 0.0081 | | | [CVE-2022-2399](https://patchblox.com/security/data/cve/CVE-2022-2399.md) | High | chromium: Use after free in WebGPU in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit hea... | 8.8 | 0.0074 | | | [CVE-2022-1144](https://patchblox.com/security/data/cve/CVE-2022-1144.md) | High | chromium: Use after free in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to eng... | 8.8 | 0.0073 | | | [CVE-2022-1145](https://patchblox.com/security/data/cve/CVE-2022-1145.md) | High | Chromium: CVE-2022-1145 Use after free in Extensions | 7.5 | 0.0068 | | | [CVE-2022-1136](https://patchblox.com/security/data/cve/CVE-2022-1136.md) | High | Chromium: CVE-2022-1136 Use after free in Tab Strip | 8.8 | 0.0064 | | | [CVE-2022-1139](https://patchblox.com/security/data/cve/CVE-2022-1139.md) | Routine | Chromium: CVE-2022-1139 Inappropriate implementation in Background Fetch API | 6.5 | 0.0093 | | | [CVE-2022-1146](https://patchblox.com/security/data/cve/CVE-2022-1146.md) | Routine | Chromium: CVE-2022-1146 Inappropriate implementation in Resource Timing | 6.5 | 0.0092 | | | [CVE-2022-1138](https://patchblox.com/security/data/cve/CVE-2022-1138.md) | Routine | Chromium: CVE-2022-1138 Inappropriate implementation in Web Cursor | 6.5 | 0.0091 | | | [CVE-2022-1129](https://patchblox.com/security/data/cve/CVE-2022-1129.md) | Routine | Chromium: CVE-2022-1129 Inappropriate implementation in Full Screen Mode | 6.5 | 0.0084 | | | [CVE-2022-1306](https://patchblox.com/security/data/cve/CVE-2022-1306.md) | Routine | Chromium: CVE-2022-1306 Inappropriate implementation in compositing | 4.3 | 0.0076 | | | [CVE-2022-1307](https://patchblox.com/security/data/cve/CVE-2022-1307.md) | Routine | Chromium: CVE-2022-1307 Inappropriate implementation in full screen | 4.3 | 0.0076 | | | [CVE-2022-1128](https://patchblox.com/security/data/cve/CVE-2022-1128.md) | Routine | Chromium: CVE-2022-1128 Inappropriate implementation in Web Share API | 6.5 | 0.0072 | | | [CVE-2022-1137](https://patchblox.com/security/data/cve/CVE-2022-1137.md) | Routine | Chromium: CVE-2022-1137 Inappropriate implementation in Extensions | 6.5 | 0.0066 | | | [CVE-2022-3863](https://patchblox.com/security/data/cve/CVE-2022-3863.md) | Routine | chromium: Use after free in Browser History in Google Chrome prior to 100.0.4896.75 allowed a remote attacker to potentially ex... | 6.1 | 0.0054 | | | [CVE-2022-1132](https://patchblox.com/security/data/cve/CVE-2022-1132.md) | Routine | chromium: Inappropriate implementation in Virtual Keyboard in Google Chrome on Chrome OS prior to 100.0.4896.60 allowed a local... | 6.1 | 0.0029 | | --- Data as of 2026-11-13T01:58:51Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.