# chromium-codecs-ffmpeg 72.0.3626.119-0ubuntu0.18.04.1: chromium-codecs-ffmpeg 72.0.3626.119-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)

chromium-codecs-ffmpeg 72.0.3626.119-0ubuntu0.18.04.1, released January 2, 2023, fixes 31 CVEs in chromium-codecs-ffmpeg. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

- Web page: https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-72.0.3626.119-0ubuntu0.18.04.1
- Platform: Linux
- Released: Jan 2, 2023
- Priority: High (Closes CVE-2019-13768, high severity)
- CVEs: 31, exploited: 0, on CISA KEV: 0

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [chromium-codecs-ffmpeg](https://patchblox.com/security/data/product/linux/chromium-codecs-ffmpeg.md) | Ubuntu 18.04.6 LTS (bionic) | 72.0.3626.119-0ubuntu0.18.04.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2019-13768](https://patchblox.com/security/data/cve/CVE-2019-13768.md) | High | chromium-browser: Use after free in FileAPI in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially perform a s... | 7.4 | 0.0094 |  |
| [CVE-2019-5782](https://patchblox.com/security/data/cve/CVE-2019-5782.md) | Routine | chromium-browser: Incorrect optimization assumptions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute... | n/a | 0.1336 |  |
| [CVE-2019-5770](https://patchblox.com/security/data/cve/CVE-2019-5770.md) | Routine | chromium-browser: Insufficient input validation in WebGL in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an... | n/a | 0.0302 |  |
| [CVE-2019-5756](https://patchblox.com/security/data/cve/CVE-2019-5756.md) | Routine | chromium-browser: Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attack... | n/a | 0.0282 |  |
| [CVE-2019-5762](https://patchblox.com/security/data/cve/CVE-2019-5762.md) | Routine | chromium-browser: Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attack... | n/a | 0.0282 |  |
| [CVE-2019-5779](https://patchblox.com/security/data/cve/CVE-2019-5779.md) | Routine | chromium-browser: Insufficient policy validation in ServiceWorker in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to b... | n/a | 0.0259 |  |
| [CVE-2019-5755](https://patchblox.com/security/data/cve/CVE-2019-5755.md) | Routine | chromium-browser: Incorrect handling of negative zero in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform... | n/a | 0.0191 |  |
| [CVE-2019-5773](https://patchblox.com/security/data/cve/CVE-2019-5773.md) | Routine | chromium-browser: Insufficient origin validation in IndexedDB in Google Chrome prior to 72.0.3626.81 allowed a remote attacker who had... | n/a | 0.0182 |  |
| [CVE-2019-5757](https://patchblox.com/security/data/cve/CVE-2019-5757.md) | Routine | chromium-browser: An incorrect object type assumption in SVG in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potent... | n/a | 0.0179 |  |
| [CVE-2019-5772](https://patchblox.com/security/data/cve/CVE-2019-5772.md) | Routine | chromium-browser: Sharing of objects over calls into JavaScript runtime in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remo... | n/a | 0.0173 |  |
| [CVE-2019-5758](https://patchblox.com/security/data/cve/CVE-2019-5758.md) | Routine | chromium-browser: Incorrect object lifecycle management in Blink in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to po... | n/a | 0.0167 |  |
| [CVE-2019-5766](https://patchblox.com/security/data/cve/CVE-2019-5766.md) | Routine | chromium-browser: Incorrect handling of origin taint checking in Canvas in Google Chrome prior to 72.0.3626.81 allowed a remote attacke... | n/a | 0.0163 |  |
| [CVE-2019-5763](https://patchblox.com/security/data/cve/CVE-2019-5763.md) | Routine | chromium-browser: Failure to check error conditions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potential... | n/a | 0.0163 |  |
| [CVE-2019-5769](https://patchblox.com/security/data/cve/CVE-2019-5769.md) | Routine | chromium-browser: Incorrect handling of invalid end character position when front rendering in Blink in Google Chrome prior to 72.0.362... | n/a | 0.0161 |  |
| [CVE-2019-5784](https://patchblox.com/security/data/cve/CVE-2019-5784.md) | Routine | chromium-browser: Incorrect handling of deferred code in V8 in Google Chrome prior to 72.0.3626.96 allowed a remote attacker to potenti... | n/a | 0.0155 |  |
| [CVE-2019-5774](https://patchblox.com/security/data/cve/CVE-2019-5774.md) | Routine | chromium-browser: Omission of the .desktop filetype from the Safe Browsing checklist in SafeBrowsing in Google Chrome on Linux prior to... | n/a | 0.0151 |  |
| [CVE-2019-5775](https://patchblox.com/security/data/cve/CVE-2019-5775.md) | Routine | chromium-browser: Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attac... | n/a | 0.0147 |  |
| [CVE-2019-5776](https://patchblox.com/security/data/cve/CVE-2019-5776.md) | Routine | chromium-browser: Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attac... | n/a | 0.0147 |  |
| [CVE-2019-5777](https://patchblox.com/security/data/cve/CVE-2019-5777.md) | Routine | chromium-browser: Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attac... | n/a | 0.0147 |  |
| [CVE-2019-5781](https://patchblox.com/security/data/cve/CVE-2019-5781.md) | Routine | chromium-browser: Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attac... | n/a | 0.0147 |  |
| [CVE-2019-5759](https://patchblox.com/security/data/cve/CVE-2019-5759.md) | Routine | chromium-browser: Incorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to 72.0.3626.81 allowed... | n/a | 0.0146 |  |
| [CVE-2019-5760](https://patchblox.com/security/data/cve/CVE-2019-5760.md) | Routine | chromium-browser: Insufficient checks of pointer validity in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to... | n/a | 0.0146 |  |
| [CVE-2019-5764](https://patchblox.com/security/data/cve/CVE-2019-5764.md) | Routine | chromium-browser: Incorrect pointer management in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentiall... | n/a | 0.0142 |  |
| [CVE-2019-5767](https://patchblox.com/security/data/cve/CVE-2019-5767.md) | Routine | chromium-browser: Insufficient protection of permission UI in WebAPKs in Google Chrome on Android prior to 72.0.3626.81 allowed an atta... | n/a | 0.0134 |  |
| [CVE-2019-5768](https://patchblox.com/security/data/cve/CVE-2019-5768.md) | Routine | chromium-browser: DevTools API not correctly gating on extension capability in DevTools in Google Chrome prior to 72.0.3626.81 allowed... | n/a | 0.0119 |  |
| [CVE-2019-5783](https://patchblox.com/security/data/cve/CVE-2019-5783.md) | Routine | chromium-browser: Missing URI encoding of untrusted input in DevTools in Google Chrome prior to 72.0.3626.81 allowed a remote attacker... | n/a | 0.0111 |  |
| [CVE-2019-5778](https://patchblox.com/security/data/cve/CVE-2019-5778.md) | Routine | chromium-browser: A missing case for handling special schemes in permission request checks in Extensions in Google Chrome prior to 72.0... | n/a | 0.0101 |  |
| [CVE-2019-13684](https://patchblox.com/security/data/cve/CVE-2019-13684.md) | Routine | chromium-browser: Inappropriate implementation in JavaScript in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to leak c... | n/a | 0.0097 |  |
| [CVE-2019-5754](https://patchblox.com/security/data/cve/CVE-2019-5754.md) | Routine | chromium-browser: Implementation error in QUIC Networking in Google Chrome prior to 72.0.3626.81 allowed an attacker running or able to... | n/a | 0.0058 |  |
| [CVE-2019-5765](https://patchblox.com/security/data/cve/CVE-2019-5765.md) | Routine | chromium-browser: An exposed debugging endpoint in the browser in Google Chrome on Android prior to 72.0.3626.81 allowed a local attack... | n/a | 0.0057 |  |
| [CVE-2019-5780](https://patchblox.com/security/data/cve/CVE-2019-5780.md) | Routine | chromium-browser: Insufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior to 72.0.3626.81 allow... | n/a | 0.0034 |  |

---

Data as of 2026-11-13T01:58:51Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.