# chromium-codecs-ffmpeg 68.0.3440.75-0ubuntu0.18.04.1: chromium-codecs-ffmpeg 68.0.3440.75-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)

chromium-codecs-ffmpeg 68.0.3440.75-0ubuntu0.18.04.1, released November 2, 2021, fixes 31 CVEs in chromium-codecs-ffmpeg. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

- Web page: https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-68.0.3440.75-0ubuntu0.18.04.1
- Platform: Linux
- Released: Nov 2, 2021
- Priority: High (Closes CVE-2018-6153, high severity)
- CVEs: 31, exploited: 0, on CISA KEV: 0

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [chromium-codecs-ffmpeg](https://patchblox.com/security/data/product/linux/chromium-codecs-ffmpeg.md) | Ubuntu 18.04.6 LTS (bionic) | 68.0.3440.75-0ubuntu0.18.04.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2018-6153](https://patchblox.com/security/data/cve/CVE-2018-6153.md) | High | chromium-browser: A precision error in Skia in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the re... | n/a | 0.0159 |  |
| [CVE-2018-6156](https://patchblox.com/security/data/cve/CVE-2018-6156.md) | High | chromium-browser: Incorect derivation of a packet length in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to... | n/a | 0.0086 |  |
| [CVE-2018-6155](https://patchblox.com/security/data/cve/CVE-2018-6155.md) | High | chromium-browser: Incorrect handling of frames in the VP8 parser in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to po... | n/a | 0.0068 |  |
| [CVE-2018-6174](https://patchblox.com/security/data/cve/CVE-2018-6174.md) | Routine | chromium-browser: Integer overflows in Swiftshader in Google Chrome prior to 68.0.3440.75 potentially allowed a remote attacker to exec... | n/a | 0.0330 |  |
| [CVE-2018-4117](https://patchblox.com/security/data/cve/CVE-2018-4117.md) | Routine | iTunes: An issue was discovered in certain Apple products. | 6.5 | 0.0300 |  |
| [CVE-2018-6164](https://patchblox.com/security/data/cve/CVE-2018-6164.md) | Routine | chromium-browser: Insufficient origin checks for CSS content in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote attacker... | n/a | 0.0189 |  |
| [CVE-2018-6162](https://patchblox.com/security/data/cve/CVE-2018-6162.md) | Routine | chromium-browser: Improper deserialization in WebGL in Google Chrome on Mac prior to 68.0.3440.75 allowed a remote attacker to potentia... | n/a | 0.0160 |  |
| [CVE-2018-6170](https://patchblox.com/security/data/cve/CVE-2018-6170.md) | Routine | chromium-browser: A bad cast in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap cor... | n/a | 0.0155 |  |
| [CVE-2018-6165](https://patchblox.com/security/data/cve/CVE-2018-6165.md) | Routine | chromium-browser: Incorrect handling of reloads in Navigation in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to spoof... | n/a | 0.0150 |  |
| [CVE-2018-6166](https://patchblox.com/security/data/cve/CVE-2018-6166.md) | Routine | chromium-browser: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote... | n/a | 0.0144 |  |
| [CVE-2018-6163](https://patchblox.com/security/data/cve/CVE-2018-6163.md) | Routine | chromium-browser: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote... | n/a | 0.0140 |  |
| [CVE-2018-6167](https://patchblox.com/security/data/cve/CVE-2018-6167.md) | Routine | chromium-browser: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote... | n/a | 0.0140 |  |
| [CVE-2018-6172](https://patchblox.com/security/data/cve/CVE-2018-6172.md) | Routine | chromium-browser: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote... | n/a | 0.0140 |  |
| [CVE-2018-6173](https://patchblox.com/security/data/cve/CVE-2018-6173.md) | Routine | chromium-browser: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote... | n/a | 0.0140 |  |
| [CVE-2018-6175](https://patchblox.com/security/data/cve/CVE-2018-6175.md) | Routine | chromium-browser: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote... | n/a | 0.0140 |  |
| [CVE-2018-6169](https://patchblox.com/security/data/cve/CVE-2018-6169.md) | Routine | chromium-browser: Lack of timeout on extension install prompt in Extensions in Google Chrome prior to 68.0.3440.75 allowed a remote att... | n/a | 0.0135 |  |
| [CVE-2018-6152](https://patchblox.com/security/data/cve/CVE-2018-6152.md) | Routine | chromium-browser: The implementation of the Page.downloadBehavior backend unconditionally marked downloaded files as safe, regardless o... | n/a | 0.0132 |  |
| [CVE-2018-6158](https://patchblox.com/security/data/cve/CVE-2018-6158.md) | Routine | chromium-browser: A race condition in Oilpan in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit he... | n/a | 0.0127 |  |
| [CVE-2018-6151](https://patchblox.com/security/data/cve/CVE-2018-6151.md) | Routine | chromium-browser: Bad cast in DevTools in Google Chrome on Win, Linux, Mac, Chrome OS prior to 66.0.3359.117 allowed an attacker who co... | n/a | 0.0121 |  |
| [CVE-2018-6179](https://patchblox.com/security/data/cve/CVE-2018-6179.md) | Routine | chromium-browser: Insufficient enforcement of file access permission in the activeTab case in Extensions in Google Chrome prior to 68.0... | n/a | 0.0118 |  |
| [CVE-2018-6154](https://patchblox.com/security/data/cve/CVE-2018-6154.md) | Routine | chromium-browser: Insufficient data validation in WebGL in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially... | n/a | 0.0096 |  |
| [CVE-2018-6178](https://patchblox.com/security/data/cve/CVE-2018-6178.md) | Routine | chromium-browser: Eliding from the wrong side in an infobar in DevTools in Google Chrome prior to 68.0.3440.75 allowed an attacker who... | n/a | 0.0091 |  |
| [CVE-2018-6161](https://patchblox.com/security/data/cve/CVE-2018-6161.md) | Routine | chromium-browser: Insufficient policy enforcement in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to bypass s... | n/a | 0.0089 |  |
| [CVE-2018-6177](https://patchblox.com/security/data/cve/CVE-2018-6177.md) | Routine | chromium-browser: Information leak in media engine in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to leak cross-origi... | n/a | 0.0088 |  |
| [CVE-2018-6150](https://patchblox.com/security/data/cve/CVE-2018-6150.md) | Routine | chromium-browser: Incorrect handling of CORS in ServiceWorker in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak... | n/a | 0.0085 |  |
| [CVE-2018-6157](https://patchblox.com/security/data/cve/CVE-2018-6157.md) | Routine | chromium-browser: Type confusion in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap... | n/a | 0.0083 |  |
| [CVE-2018-6159](https://patchblox.com/security/data/cve/CVE-2018-6159.md) | Routine | chromium-browser: Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to... | n/a | 0.0078 |  |
| [CVE-2018-6168](https://patchblox.com/security/data/cve/CVE-2018-6168.md) | Routine | chromium-browser: Information leak in media engine in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to obtain potential... | n/a | 0.0078 |  |
| [CVE-2018-6176](https://patchblox.com/security/data/cve/CVE-2018-6176.md) | Routine | chromium-browser: Insufficient file type enforcement in Extensions API in Google Chrome prior to 68.0.3440.75 allowed a remote attacker... | n/a | 0.0049 |  |
| [CVE-2018-6171](https://patchblox.com/security/data/cve/CVE-2018-6171.md) | Routine | chromium-browser: Use after free in Bluetooth in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to instal... | n/a | 0.0035 |  |
| [CVE-2018-6044](https://patchblox.com/security/data/cve/CVE-2018-6044.md) | Routine | chromium-browser: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER | n/a | n/a |  |

---

Data as of 2026-11-12T19:57:06Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.