Linux · Ubuntu · Package update · February 7, 2023

chromium-codecs-ffmpeg 110.0.5481.100-0ubuntu0.18.04.1: chromium-codecs-ffmpeg 110.0.5481.100-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)

chromium-codecs-ffmpeg 110.0.5481.100-0ubuntu0.18.04.1, released February 7, 2023, fixes 13 CVEs in chromium-codecs-ffmpeg. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product
CVEs closed
13
None rated Critical
Exploited
0
None reported
Highest CVSS
8.8
Base score, 0 to 10
Highest EPSS
0.0098
62nd percentile

Priority of the 13 CVEs

Patch now 0 Urgent 0 High 11 Routine 2

Fixed package versions

ProductReleaseFixed in
chromium-codecs-ffmpegUbuntu 18.04.6 LTS (bionic)110.0.5481.100-0ubuntu0.18.04.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2023-0699 Chromium: CVE-2023-0699 Use after free in GPU8.8 0.0077 None reported
High CVE-2023-0471 Chromium: CVE-2023-0471 Use after free in WebTransport8.8 0.0076 None reported
High CVE-2023-0701 Chromium: CVE-2023-0701 Heap buffer overflow in WebUI8.8 0.0074 None reported
High CVE-2023-0705 Chromium: CVE-2023-0705 Integer overflow in Core7.5 0.0073 None reported
High CVE-2023-0702 Chromium: CVE-2023-0702 Type Confusion in Data Transfer8.8 0.0072 None reported
High CVE-2023-0472 Chromium: CVE-2023-0472 Use after free in WebRTC8.8 0.0071 None reported
High CVE-2023-0473 Chromium: CVE-2023-0473: Type Confusion in ServiceWorker8.8 0.0070 None reported
High CVE-2023-0703 Chromium: CVE-2023-0703 Type Confusion in DevTools8.8 0.0069 None reported
High CVE-2023-0698 Chromium: CVE-2023-0698 Out of bounds read in WebRTC8.8 0.0065 None reported
High CVE-2023-0696 Chromium: CVE-2023-0696 Type Confusion in V88.8 0.0058 None reported
High CVE-2023-0474 Chromium: CVE-2023-0474 Use after free in GuestView8.8 0.0051 None reported
Routine CVE-2023-0704 Chromium: CVE-2023-0704 Insufficient policy enforcement in DevTools6.5 0.0098 None reported
Routine CVE-2023-0700 Chromium: CVE-2023-0700 Inappropriate implementation in Download6.5 0.0073 None reported
Showing 1 to 13 of 13 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.