# chromium-codecs-ffmpeg-extra 69.0.3497.81-0ubuntu0.18.04.1: chromium-codecs-ffmpeg-extra 69.0.3497.81-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic) chromium-codecs-ffmpeg-extra 69.0.3497.81-0ubuntu0.18.04.1, released June 27, 2019, fixes 25 CVEs in chromium-codecs-ffmpeg-extra. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported. - Web page: https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-extra-69.0.3497.81-0ubuntu0.18.04.1 - Platform: Linux - Released: Jun 27, 2019 - Priority: Routine (Closes 25 CVEs, none high severity) - CVEs: 25, exploited: 0, on CISA KEV: 0 ## Applies to | Product | Release | Fixed in | |---|---|---| | [chromium-codecs-ffmpeg-extra](https://patchblox.com/security/data/product/linux/chromium-codecs-ffmpeg-extra.md) | Ubuntu 18.04.6 LTS (bionic) | 69.0.3497.81-0ubuntu0.18.04.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2018-16083](https://patchblox.com/security/data/cve/CVE-2018-16083.md) | Routine | chromium-browser: An out of bounds read in forward error correction code in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a rem... | n/a | 0.0526 | | | [CVE-2018-16071](https://patchblox.com/security/data/cve/CVE-2018-16071.md) | Routine | chromium-browser: A use after free in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit he... | n/a | 0.0480 | | | [CVE-2018-16065](https://patchblox.com/security/data/cve/CVE-2018-16065.md) | Routine | chromium-browser: A Javascript reentrancy issues that caused a use-after-free in V8 in Google Chrome prior to 69.0.3497.81 allowed a re... | n/a | 0.0324 | | | [CVE-2018-16068](https://patchblox.com/security/data/cve/CVE-2018-16068.md) | Routine | chromium-browser: Missing validation in Mojo in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially perform a... | n/a | 0.0194 | | | [CVE-2018-16078](https://patchblox.com/security/data/cve/CVE-2018-16078.md) | Routine | chromium-browser: Unsafe handling of credit card details in Autofill in Google Chrome prior to 69.0.3497.81 allowed a remote attacker t... | n/a | 0.0185 | | | [CVE-2018-16435](https://patchblox.com/security/data/cve/CVE-2018-16435.md) | Routine | chromium-browser: Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscga... | n/a | 0.0174 | | | [CVE-2018-16076](https://patchblox.com/security/data/cve/CVE-2018-16076.md) | Routine | chromium-browser: Missing bounds check in PDFium in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of... | n/a | 0.0167 | | | [CVE-2018-16082](https://patchblox.com/security/data/cve/CVE-2018-16082.md) | Routine | chromium-browser: An out of bounds read in Swiftshader in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially... | n/a | 0.0156 | | | [CVE-2018-16085](https://patchblox.com/security/data/cve/CVE-2018-16085.md) | Routine | chromium-browser: A use after free in ResourceCoordinator in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potential... | n/a | 0.0148 | | | [CVE-2018-16066](https://patchblox.com/security/data/cve/CVE-2018-16066.md) | Routine | chromium-browser: A use after free in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit hea... | n/a | 0.0146 | | | [CVE-2018-16067](https://patchblox.com/security/data/cve/CVE-2018-16067.md) | Routine | chromium-browser: A use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit... | n/a | 0.0141 | | | [CVE-2018-16080](https://patchblox.com/security/data/cve/CVE-2018-16080.md) | Routine | chromium-browser: A missing check for popup window handling in Fullscreen in Google Chrome on macOS prior to 69.0.3497.81 allowed a rem... | n/a | 0.0136 | | | [CVE-2018-16088](https://patchblox.com/security/data/cve/CVE-2018-16088.md) | Routine | chromium-browser: A missing check for JS-simulated input events in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attack... | n/a | 0.0113 | | | [CVE-2018-16084](https://patchblox.com/security/data/cve/CVE-2018-16084.md) | Routine | chromium-browser: The default selected dialog button in CustomHandlers in Google Chrome prior to 69.0.3497.81 allowed a remote attacker... | n/a | 0.0108 | | | [CVE-2018-16079](https://patchblox.com/security/data/cve/CVE-2018-16079.md) | Routine | chromium-browser: A race condition between permission prompts and navigations in Prompts in Google Chrome prior to 69.0.3497.81 allowed... | n/a | 0.0107 | | | [CVE-2018-16081](https://patchblox.com/security/data/cve/CVE-2018-16081.md) | Routine | chromium-browser: Allowing the chrome.debugger API to run on file:// URLs in DevTools in Google Chrome prior to 69.0.3497.81 allowed an... | n/a | 0.0104 | | | [CVE-2018-16087](https://patchblox.com/security/data/cve/CVE-2018-16087.md) | Routine | chromium-browser: Lack of proper state tracking in Permissions in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypa... | n/a | 0.0097 | | | [CVE-2018-16069](https://patchblox.com/security/data/cve/CVE-2018-16069.md) | Routine | chromium-browser: Unintended floating-point error accumulation in SwiftShader in Google Chrome prior to 69.0.3497.81 allowed a remote a... | n/a | 0.0089 | | | [CVE-2018-16070](https://patchblox.com/security/data/cve/CVE-2018-16070.md) | Routine | chromium-browser: Integer overflows in Skia in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit hea... | n/a | 0.0088 | | | [CVE-2018-16075](https://patchblox.com/security/data/cve/CVE-2018-16075.md) | Routine | chromium-browser: Insufficient file type enforcement in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to obtai... | n/a | 0.0088 | | | [CVE-2018-16073](https://patchblox.com/security/data/cve/CVE-2018-16073.md) | Routine | chromium-browser: Insufficient policy enforcement in site isolation in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to... | n/a | 0.0086 | | | [CVE-2018-16074](https://patchblox.com/security/data/cve/CVE-2018-16074.md) | Routine | chromium-browser: Insufficient policy enforcement in site isolation in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to... | n/a | 0.0085 | | | [CVE-2018-16072](https://patchblox.com/security/data/cve/CVE-2018-16072.md) | Routine | chromium-browser: A missing origin check related to HLS manifests in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote atta... | n/a | 0.0078 | | | [CVE-2018-16077](https://patchblox.com/security/data/cve/CVE-2018-16077.md) | Routine | chromium-browser: Object lifecycle issue in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass content se... | n/a | 0.0072 | | | [CVE-2018-16086](https://patchblox.com/security/data/cve/CVE-2018-16086.md) | Routine | chromium-browser: Insufficient policy enforcement in extensions API in Google Chrome prior to 69.0.3497.81 allowed an attacker who conv... | n/a | 0.0046 | | --- Data as of 2026-11-12T19:57:06Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.