# chromium-codecs-ffmpeg 94.0.4606.71-0ubuntu0.18.04.1: chromium-codecs-ffmpeg 94.0.4606.71-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic) chromium-codecs-ffmpeg 94.0.4606.71-0ubuntu0.18.04.1, released October 8, 2021, fixes 28 CVEs in chromium-codecs-ffmpeg. 5 of them are being exploited (CVE-2021-30632); 5 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported. - Web page: https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-94.0.4606.71-0ubuntu0.18.04.1 - Platform: Linux - Released: Oct 8, 2021 - Priority: Patch now (Closes CVE-2021-30632, exploited (CISA KEV)) - CVEs: 28, exploited: 5, on CISA KEV: 5 ## Applies to | Product | Release | Fixed in | |---|---|---| | [chromium-codecs-ffmpeg](https://patchblox.com/security/data/product/linux/chromium-codecs-ffmpeg.md) | Ubuntu 18.04.6 LTS (bionic) | 94.0.4606.71-0ubuntu0.18.04.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2021-30632](https://patchblox.com/security/data/cve/CVE-2021-30632.md) | Patch now | Chromium: CVE-2021-30632 Out of bounds write in V8 | 8.8 | 0.6319 | CISA KEV | | [CVE-2021-37975](https://patchblox.com/security/data/cve/CVE-2021-37975.md) | Patch now | Chromium: CVE-2021-37975 Use after free in V8 | 8.8 | 0.3489 | CISA KEV | | [CVE-2021-30633](https://patchblox.com/security/data/cve/CVE-2021-30633.md) | Patch now | Chromium: CVE-2021-30633 Use after free in Indexed DB API | 9.6 | 0.3318 | CISA KEV | | [CVE-2021-37976](https://patchblox.com/security/data/cve/CVE-2021-37976.md) | Patch now | Chromium: CVE-2021-37976 Information leak in core | 6.5 | 0.1990 | CISA KEV | | [CVE-2021-37973](https://patchblox.com/security/data/cve/CVE-2021-37973.md) | Patch now | Chromium: CVE-2021-37973 Use after free in Portals | 9.6 | 0.1174 | CISA KEV | | [CVE-2021-30625](https://patchblox.com/security/data/cve/CVE-2021-30625.md) | High | Chromium: CVE-2021-30625 Use after free in Selection API | 8.8 | 0.1013 | | | [CVE-2021-37972](https://patchblox.com/security/data/cve/CVE-2021-37972.md) | High | Chromium: CVE-2021-37972 Out of bounds read in libjpeg-turbo | 8.8 | 0.0179 | | | [CVE-2021-37970](https://patchblox.com/security/data/cve/CVE-2021-37970.md) | High | Chromium: CVE-2021-37970 Use after free in File System API | 8.8 | 0.0145 | | | [CVE-2021-37974](https://patchblox.com/security/data/cve/CVE-2021-37974.md) | High | Chromium: CVE-2021-37974 Use after free in Safe Browsing | 8.8 | 0.0135 | | | [CVE-2021-37961](https://patchblox.com/security/data/cve/CVE-2021-37961.md) | High | Chromium: CVE-2021-37961 Use after free in Tab Strip | 8.8 | 0.0132 | | | [CVE-2021-37962](https://patchblox.com/security/data/cve/CVE-2021-37962.md) | High | Chromium: CVE-2021-37962 Use after free in Performance Manager | 8.8 | 0.0132 | | | [CVE-2021-37956](https://patchblox.com/security/data/cve/CVE-2021-37956.md) | High | Chromium: CVE-2021-37956 Use after free in Offline use | 8.8 | 0.0125 | | | [CVE-2021-37957](https://patchblox.com/security/data/cve/CVE-2021-37957.md) | High | Chromium: CVE-2021-37957 Use after free in WebGPU | 8.8 | 0.0125 | | | [CVE-2021-30626](https://patchblox.com/security/data/cve/CVE-2021-30626.md) | High | Chromium: CVE-2021-30626 Out of bounds memory access in ANGLE | 8.8 | 0.0101 | | | [CVE-2021-30628](https://patchblox.com/security/data/cve/CVE-2021-30628.md) | High | Chromium: CVE-2021-30628 Stack buffer overflow in ANGLE | 8.8 | 0.0098 | | | [CVE-2021-37969](https://patchblox.com/security/data/cve/CVE-2021-37969.md) | High | Chromium: CVE-2021-37969 Inappropriate implementation in Google Updater | 7.8 | 0.0095 | | | [CVE-2021-37959](https://patchblox.com/security/data/cve/CVE-2021-37959.md) | High | Chromium: CVE-2021-37959 Use after free in Task Manager | 8.8 | 0.0094 | | | [CVE-2021-30627](https://patchblox.com/security/data/cve/CVE-2021-30627.md) | High | Chromium: CVE-2021-30627 Type Confusion in Blink layout | 8.8 | 0.0091 | | | [CVE-2021-30629](https://patchblox.com/security/data/cve/CVE-2021-30629.md) | High | Chromium: CVE-2021-30629 Use after free in Permissions | 8.8 | 0.0088 | | | [CVE-2021-37968](https://patchblox.com/security/data/cve/CVE-2021-37968.md) | Routine | Chromium: CVE-2021-37968 Inappropriate implementation in Background Fetch API | 4.3 | 0.0128 | | | [CVE-2021-37971](https://patchblox.com/security/data/cve/CVE-2021-37971.md) | Routine | Chromium: CVE-2021-37971 Incorrect security UI in Web Browser UI | 4.3 | 0.0126 | | | [CVE-2021-37965](https://patchblox.com/security/data/cve/CVE-2021-37965.md) | Routine | Chromium: CVE-2021-37965 Inappropriate implementation in Background Fetch API | 4.3 | 0.0121 | | | [CVE-2021-37963](https://patchblox.com/security/data/cve/CVE-2021-37963.md) | Routine | Chromium: CVE-2021-37963 Side-channel information leakage in DevTools | 4.3 | 0.0115 | | | [CVE-2021-37958](https://patchblox.com/security/data/cve/CVE-2021-37958.md) | Routine | Chromium: CVE-2021-37958 Inappropriate implementation in Navigation | 5.4 | 0.0099 | | | [CVE-2021-37967](https://patchblox.com/security/data/cve/CVE-2021-37967.md) | Routine | Chromium: CVE-2021-37967 Inappropriate implementation in Background Fetch API | 4.3 | 0.0080 | | | [CVE-2021-30630](https://patchblox.com/security/data/cve/CVE-2021-30630.md) | Routine | Chromium: CVE-2021-30630 Inappropriate implementation in Blink | 4.3 | 0.0073 | | | [CVE-2021-37966](https://patchblox.com/security/data/cve/CVE-2021-37966.md) | Routine | Chromium: CVE-2021-37966 Inappropriate implementation in Compositing | n/a | 0.0071 | | | [CVE-2021-37964](https://patchblox.com/security/data/cve/CVE-2021-37964.md) | Routine | Chromium: CVE-2021-37964 Inappropriate implementation in ChromeOS Networking | n/a | 0.0052 | | --- Data as of 2026-11-12T19:57:06Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.