# chromium-codecs-ffmpeg 90.0.4430.72-0ubuntu0.18.04.1: chromium-codecs-ffmpeg 90.0.4430.72-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic) chromium-codecs-ffmpeg 90.0.4430.72-0ubuntu0.18.04.1, released April 26, 2021, fixes 27 CVEs in chromium-codecs-ffmpeg. 2 of them are being exploited (CVE-2021-21220); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported. - Web page: https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-90.0.4430.72-0ubuntu0.18.04.1 - Platform: Linux - Released: Apr 26, 2021 - Priority: Patch now (Closes CVE-2021-21220, exploited (CISA KEV)) - CVEs: 27, exploited: 2, on CISA KEV: 2 ## Applies to | Product | Release | Fixed in | |---|---|---| | [chromium-codecs-ffmpeg](https://patchblox.com/security/data/product/linux/chromium-codecs-ffmpeg.md) | Ubuntu 18.04.6 LTS (bionic) | 90.0.4430.72-0ubuntu0.18.04.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2021-21220](https://patchblox.com/security/data/cve/CVE-2021-21220.md) | Patch now | Chromium: CVE-2021-21220 Insufficient validation of untrusted input in V8 for x86_64 | n/a | 0.7044 | CISA KEV | | [CVE-2021-21206](https://patchblox.com/security/data/cve/CVE-2021-21206.md) | Patch now | Chromium: CVE-2021-21206 Use after free in Blink | n/a | 0.0931 | CISA KEV | | [CVE-2021-21215](https://patchblox.com/security/data/cve/CVE-2021-21215.md) | Routine | Chromium: CVE-2021-21215 Inappropriate implementation in Autofill | n/a | 0.3447 | | | [CVE-2021-21216](https://patchblox.com/security/data/cve/CVE-2021-21216.md) | Routine | Chromium: CVE-2021-21216 Inappropriate implementation in Autofill | n/a | 0.2177 | | | [CVE-2021-21210](https://patchblox.com/security/data/cve/CVE-2021-21210.md) | Routine | Chromium: CVE-2021-21210 Inappropriate implementation in Network | n/a | 0.0191 | | | [CVE-2021-21212](https://patchblox.com/security/data/cve/CVE-2021-21212.md) | Routine | Chromium: CVE-2021-21212 Incorrect security UI in Network Config UI | n/a | 0.0181 | | | [CVE-2021-21198](https://patchblox.com/security/data/cve/CVE-2021-21198.md) | Routine | Chromium: CVE-2021-21198 Out of bounds read in IPC | n/a | 0.0179 | | | [CVE-2021-21203](https://patchblox.com/security/data/cve/CVE-2021-21203.md) | Routine | Chromium: CVE-2021-21203 Use after free in Blink | n/a | 0.0177 | | | [CVE-2021-21201](https://patchblox.com/security/data/cve/CVE-2021-21201.md) | Routine | Chromium: CVE-2021-21201 Use after free in permissions | n/a | 0.0170 | | | [CVE-2021-21217](https://patchblox.com/security/data/cve/CVE-2021-21217.md) | Routine | Chromium: CVE-2021-21217 Uninitialized Use in PDFium | n/a | 0.0164 | | | [CVE-2021-21221](https://patchblox.com/security/data/cve/CVE-2021-21221.md) | Routine | Chromium: CVE-2021-21221 Insufficient validation of untrusted input in Mojo | n/a | 0.0157 | | | [CVE-2021-21204](https://patchblox.com/security/data/cve/CVE-2021-21204.md) | Routine | Chromium: CVE-2021-21204 Use after free in Blink | n/a | 0.0157 | | | [CVE-2021-21213](https://patchblox.com/security/data/cve/CVE-2021-21213.md) | Routine | Chromium: CVE-2021-21213 Use after free in WebMIDI | n/a | 0.0152 | | | [CVE-2021-21205](https://patchblox.com/security/data/cve/CVE-2021-21205.md) | Routine | Chromium: CVE-2021-21205 Insufficient policy enforcement in navigation | n/a | 0.0147 | | | [CVE-2021-21208](https://patchblox.com/security/data/cve/CVE-2021-21208.md) | Routine | Chromium: CVE-2021-21208 Insufficient data validation in QR scanner | n/a | 0.0140 | | | [CVE-2021-21197](https://patchblox.com/security/data/cve/CVE-2021-21197.md) | Routine | Chromium: CVE-2021-21197 Heap buffer overflow in TabStrip | n/a | 0.0136 | | | [CVE-2021-21195](https://patchblox.com/security/data/cve/CVE-2021-21195.md) | Routine | Chromium: CVE-2021-21195 Use after free in V8 | n/a | 0.0135 | | | [CVE-2021-21196](https://patchblox.com/security/data/cve/CVE-2021-21196.md) | Routine | Chromium: CVE-2021-21196 Heap buffer overflow in TabStrip | n/a | 0.0134 | | | [CVE-2021-21218](https://patchblox.com/security/data/cve/CVE-2021-21218.md) | Routine | Chromium: CVE-2021-21218 Uninitialized Use in PDFium | n/a | 0.0134 | | | [CVE-2021-21214](https://patchblox.com/security/data/cve/CVE-2021-21214.md) | Routine | Chromium: CVE-2021-21214 Use after free in Network API | n/a | 0.0129 | | | [CVE-2021-21194](https://patchblox.com/security/data/cve/CVE-2021-21194.md) | Routine | Chromium: CVE-2021-21194 Use after free in screen capture | n/a | 0.0121 | | | [CVE-2021-21219](https://patchblox.com/security/data/cve/CVE-2021-21219.md) | Routine | Chromium: CVE-2021-21219 Uninitialized Use in PDFium | n/a | 0.0121 | | | [CVE-2021-21199](https://patchblox.com/security/data/cve/CVE-2021-21199.md) | Routine | Chromium: CVE-2021-21199 Use Use after free in Aura | n/a | 0.0115 | | | [CVE-2021-21202](https://patchblox.com/security/data/cve/CVE-2021-21202.md) | Routine | Chromium: CVE-2021-21202 Use after free in extensions | n/a | 0.0103 | | | [CVE-2021-21211](https://patchblox.com/security/data/cve/CVE-2021-21211.md) | Routine | Chromium: CVE-2021-21211 Inappropriate implementation in Navigation | n/a | 0.0102 | | | [CVE-2021-21209](https://patchblox.com/security/data/cve/CVE-2021-21209.md) | Routine | Chromium: CVE-2021-21209 Inappropriate implementation in storage | n/a | 0.0101 | | | [CVE-2021-21207](https://patchblox.com/security/data/cve/CVE-2021-21207.md) | Routine | Chromium: CVE-2021-21207 Use after free in IndexedDB | n/a | 0.0094 | | --- Data as of 2026-11-12T19:57:06Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.