{
  "fix": "chromium-codecs-ffmpeg 69.0.3497.81-0ubuntu0.18.04.1",
  "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-69.0.3497.81-0ubuntu0.18.04.1",
  "summary": "chromium-codecs-ffmpeg 69.0.3497.81-0ubuntu0.18.04.1, released June 27, 2019, fixes 25 CVEs in chromium-codecs-ffmpeg. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.",
  "platform": "linux",
  "type": "package",
  "title": "chromium-codecs-ffmpeg 69.0.3497.81-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)",
  "released": "2019-06-27T10:15:00Z",
  "priority": "Routine",
  "priorityTier": 4,
  "priorityReason": "Closes 25 CVEs, none high severity",
  "supported": false,
  "cveCount": 25,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.05264,
  "appliesTo": [
    {
      "product": "chromium-codecs-ffmpeg",
      "productUrl": "https://patchblox.com/security/product/linux/chromium-codecs-ffmpeg",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "69.0.3497.81-0ubuntu0.18.04.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2018-16083",
      "url": "https://patchblox.com/security/cve/CVE-2018-16083",
      "title": "chromium-browser: An out of bounds read in forward error correction code in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a rem...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.05264,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-16071",
      "url": "https://patchblox.com/security/cve/CVE-2018-16071",
      "title": "chromium-browser: A use after free in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit he...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.04798,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-16065",
      "url": "https://patchblox.com/security/cve/CVE-2018-16065",
      "title": "chromium-browser: A Javascript reentrancy issues that caused a use-after-free in V8 in Google Chrome prior to 69.0.3497.81 allowed a re...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.03239,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-16068",
      "url": "https://patchblox.com/security/cve/CVE-2018-16068",
      "title": "chromium-browser: Missing validation in Mojo in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially perform a...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01937,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-16078",
      "url": "https://patchblox.com/security/cve/CVE-2018-16078",
      "title": "chromium-browser: Unsafe handling of credit card details in Autofill in Google Chrome prior to 69.0.3497.81 allowed a remote attacker t...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01848,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-16435",
      "url": "https://patchblox.com/security/cve/CVE-2018-16435",
      "title": "chromium-browser: Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscga...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-16076",
      "url": "https://patchblox.com/security/cve/CVE-2018-16076",
      "title": "chromium-browser: Missing bounds check in PDFium in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01673,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-16082",
      "url": "https://patchblox.com/security/cve/CVE-2018-16082",
      "title": "chromium-browser: An out of bounds read in Swiftshader in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01556,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-16085",
      "url": "https://patchblox.com/security/cve/CVE-2018-16085",
      "title": "chromium-browser: A use after free in ResourceCoordinator in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potential...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01479,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-16066",
      "url": "https://patchblox.com/security/cve/CVE-2018-16066",
      "title": "chromium-browser: A use after free in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit hea...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01459,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-16067",
      "url": "https://patchblox.com/security/cve/CVE-2018-16067",
      "title": "chromium-browser: A use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01408,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-16080",
      "url": "https://patchblox.com/security/cve/CVE-2018-16080",
      "title": "chromium-browser: A missing check for popup window handling in Fullscreen in Google Chrome on macOS prior to 69.0.3497.81 allowed a rem...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01363,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-16088",
      "url": "https://patchblox.com/security/cve/CVE-2018-16088",
      "title": "chromium-browser: A missing check for JS-simulated input events in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attack...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-16084",
      "url": "https://patchblox.com/security/cve/CVE-2018-16084",
      "title": "chromium-browser: The default selected dialog button in CustomHandlers in Google Chrome prior to 69.0.3497.81 allowed a remote attacker...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01084,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-16079",
      "url": "https://patchblox.com/security/cve/CVE-2018-16079",
      "title": "chromium-browser: A race condition between permission prompts and navigations in Prompts in Google Chrome prior to 69.0.3497.81 allowed...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01072,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-16081",
      "url": "https://patchblox.com/security/cve/CVE-2018-16081",
      "title": "chromium-browser: Allowing the chrome.debugger API to run on file:// URLs in DevTools in Google Chrome prior to 69.0.3497.81 allowed an...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01044,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-16087",
      "url": "https://patchblox.com/security/cve/CVE-2018-16087",
      "title": "chromium-browser: Lack of proper state tracking in Permissions in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypa...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00971,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-16069",
      "url": "https://patchblox.com/security/cve/CVE-2018-16069",
      "title": "chromium-browser: Unintended floating-point error accumulation in SwiftShader in Google Chrome prior to 69.0.3497.81 allowed a remote a...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00889,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-16070",
      "url": "https://patchblox.com/security/cve/CVE-2018-16070",
      "title": "chromium-browser: Integer overflows in Skia in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit hea...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0088,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-16075",
      "url": "https://patchblox.com/security/cve/CVE-2018-16075",
      "title": "chromium-browser: Insufficient file type enforcement in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to obtai...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00876,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-16073",
      "url": "https://patchblox.com/security/cve/CVE-2018-16073",
      "title": "chromium-browser: Insufficient policy enforcement in site isolation in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00856,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-16074",
      "url": "https://patchblox.com/security/cve/CVE-2018-16074",
      "title": "chromium-browser: Insufficient policy enforcement in site isolation in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00846,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-16072",
      "url": "https://patchblox.com/security/cve/CVE-2018-16072",
      "title": "chromium-browser: A missing origin check related to HLS manifests in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote atta...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0078,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-16077",
      "url": "https://patchblox.com/security/cve/CVE-2018-16077",
      "title": "chromium-browser: Object lifecycle issue in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass content se...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00716,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-16086",
      "url": "https://patchblox.com/security/cve/CVE-2018-16086",
      "title": "chromium-browser: Insufficient policy enforcement in extensions API in Google Chrome prior to 69.0.3497.81 allowed an attacker who conv...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00458,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-12T19:57:06Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}