# chromium-codecs-ffmpeg 105.0.5195.102-0ubuntu0.18.04.1: chromium-codecs-ffmpeg 105.0.5195.102-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic) chromium-codecs-ffmpeg 105.0.5195.102-0ubuntu0.18.04.1, released September 26, 2022, fixes 23 CVEs in chromium-codecs-ffmpeg. 2 of them are being exploited (CVE-2022-3038); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported. - Web page: https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-105.0.5195.102-0ubuntu0.18.04.1 - Platform: Linux - Released: Sep 26, 2022 - Priority: Patch now (Closes CVE-2022-3038, exploited (CISA KEV)) - CVEs: 23, exploited: 2, on CISA KEV: 2 ## Applies to | Product | Release | Fixed in | |---|---|---| | [chromium-codecs-ffmpeg](https://patchblox.com/security/data/product/linux/chromium-codecs-ffmpeg.md) | Ubuntu 18.04.6 LTS (bionic) | 105.0.5195.102-0ubuntu0.18.04.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2022-3038](https://patchblox.com/security/data/cve/CVE-2022-3038.md) | Patch now | Chromium: CVE-2022-3038 Use after free in Network Service | 8.8 | 0.2493 | CISA KEV | | [CVE-2022-3075](https://patchblox.com/security/data/cve/CVE-2022-3075.md) | Patch now | Chromium: CVE-2022-3075 Insufficient data validation in Mojo | 9.6 | 0.0577 | CISA KEV | | [CVE-2022-3045](https://patchblox.com/security/data/cve/CVE-2022-3045.md) | High | Chromium: CVE-2022-3045 Insufficient validation of untrusted input in V8 | 8.8 | 0.0116 | | | [CVE-2022-3040](https://patchblox.com/security/data/cve/CVE-2022-3040.md) | High | Chromium: CVE-2022-3040 Use after free in Layout | 8.8 | 0.0107 | | | [CVE-2022-3041](https://patchblox.com/security/data/cve/CVE-2022-3041.md) | High | Chromium: CVE-2022-3041 Use after free in WebSQL | 8.8 | 0.0107 | | | [CVE-2022-3046](https://patchblox.com/security/data/cve/CVE-2022-3046.md) | High | Chromium: CVE-2022-3046 Use after free in Browser Tag | 8.8 | 0.0096 | | | [CVE-2022-3052](https://patchblox.com/security/data/cve/CVE-2022-3052.md) | High | chromium: Heap buffer overflow in Window Manager in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote... | 8.8 | 0.0096 | | | [CVE-2022-3039](https://patchblox.com/security/data/cve/CVE-2022-3039.md) | High | Chromium: CVE-2022-3039 Use after free in WebSQL | 8.8 | 0.0096 | | | [CVE-2022-3050](https://patchblox.com/security/data/cve/CVE-2022-3050.md) | High | chromium: Heap buffer overflow in WebUI in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker who conv... | 8.8 | 0.0092 | | | [CVE-2022-3043](https://patchblox.com/security/data/cve/CVE-2022-3043.md) | High | chromium: Heap buffer overflow in Screen Capture in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker... | 8.8 | 0.0085 | | | [CVE-2022-3055](https://patchblox.com/security/data/cve/CVE-2022-3055.md) | High | Chromium: CVE-2022-3055 Use after free in Passwords | 8.8 | 0.0084 | | | [CVE-2022-3051](https://patchblox.com/security/data/cve/CVE-2022-3051.md) | High | chromium: Heap buffer overflow in Exosphere in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attac... | 8.8 | 0.0083 | | | [CVE-2022-3058](https://patchblox.com/security/data/cve/CVE-2022-3058.md) | High | Chromium: CVE-2022-3058 Use after free in Sign-In Flow | 8.8 | 0.0081 | | | [CVE-2022-3049](https://patchblox.com/security/data/cve/CVE-2022-3049.md) | High | chromium: Use after free in SplitScreen in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker... | 8.8 | 0.0066 | | | [CVE-2022-3042](https://patchblox.com/security/data/cve/CVE-2022-3042.md) | High | chromium: Use after free in PhoneHub in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker to potentia... | 8.8 | 0.0062 | | | [CVE-2022-3071](https://patchblox.com/security/data/cve/CVE-2022-3071.md) | High | chromium: Use after free in Tab Strip in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker wh... | 8.8 | 0.0056 | | | [CVE-2022-3056](https://patchblox.com/security/data/cve/CVE-2022-3056.md) | Routine | Chromium: CVE-2022-3056 Insufficient policy enforcement in Content Security Policy | 6.5 | 0.0112 | | | [CVE-2022-3044](https://patchblox.com/security/data/cve/CVE-2022-3044.md) | Routine | Chromium: CVE-2022-3044 Inappropriate implementation in Site Isolation | 6.5 | 0.0107 | | | [CVE-2022-3054](https://patchblox.com/security/data/cve/CVE-2022-3054.md) | Routine | Chromium: CVE-2022-3054 Insufficient policy enforcement in DevTools | 6.5 | 0.0079 | | | [CVE-2022-3053](https://patchblox.com/security/data/cve/CVE-2022-3053.md) | Routine | Chromium: CVE-2022-3053 Inappropriate implementation in Pointer Lock | 4.3 | 0.0067 | | | [CVE-2022-3057](https://patchblox.com/security/data/cve/CVE-2022-3057.md) | Routine | Chromium: CVE-2022-3057 Inappropriate implementation in iframe Sandbox | 6.5 | 0.0066 | | | [CVE-2022-3047](https://patchblox.com/security/data/cve/CVE-2022-3047.md) | Routine | Chromium: CVE-2022-3047 Insufficient policy enforcement in Extensions API | 6.5 | 0.0058 | | | [CVE-2022-3048](https://patchblox.com/security/data/cve/CVE-2022-3048.md) | Routine | chromium: Inappropriate implementation in Chrome OS lockscreen in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a l... | 6.8 | 0.0038 | | --- Data as of 2026-11-13T08:00:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.