# chromium-codecs-ffmpeg-extra 63.0.3239.84-0ubuntu1: chromium-codecs-ffmpeg-extra 63.0.3239.84-0ubuntu1 for Ubuntu 18.04.6 LTS (bionic) chromium-codecs-ffmpeg-extra 63.0.3239.84-0ubuntu1, released August 28, 2018, fixes 20 CVEs in chromium-codecs-ffmpeg-extra. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported. - Web page: https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-extra-63.0.3239.84-0ubuntu1 - Platform: Linux - Released: Aug 28, 2018 - Priority: Routine (Closes 20 CVEs, none high severity) - CVEs: 20, exploited: 0, on CISA KEV: 0 ## Applies to | Product | Release | Fixed in | |---|---|---| | [chromium-codecs-ffmpeg-extra](https://patchblox.com/security/data/product/linux/chromium-codecs-ffmpeg-extra.md) | Ubuntu 18.04.6 LTS (bionic) | 63.0.3239.84-0ubuntu1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2017-15412](https://patchblox.com/security/data/cve/CVE-2017-15412.md) | Routine | chromium-browser: Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a... | n/a | 0.0294 | | | [CVE-2017-15422](https://patchblox.com/security/data/cve/CVE-2017-15422.md) | Routine | chromium-browser: Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1,... | n/a | 0.0254 | | | [CVE-2017-15407](https://patchblox.com/security/data/cve/CVE-2017-15407.md) | Routine | chromium-browser: Out-of-bounds Write in the QUIC networking stack in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to... | n/a | 0.0243 | | | [CVE-2017-15415](https://patchblox.com/security/data/cve/CVE-2017-15415.md) | Routine | chromium-browser: Incorrect serialization in IPC in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the value of... | n/a | 0.0174 | | | [CVE-2017-15413](https://patchblox.com/security/data/cve/CVE-2017-15413.md) | Routine | chromium-browser: Type confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially e... | n/a | 0.0166 | | | [CVE-2017-15418](https://patchblox.com/security/data/cve/CVE-2017-15418.md) | Routine | chromium-browser: Use of uninitialized memory in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to obtain potent... | n/a | 0.0163 | | | [CVE-2017-15409](https://patchblox.com/security/data/cve/CVE-2017-15409.md) | Routine | chromium-browser: Heap buffer overflow in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit... | n/a | 0.0163 | | | [CVE-2017-15410](https://patchblox.com/security/data/cve/CVE-2017-15410.md) | Routine | chromium-browser: Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap... | n/a | 0.0158 | | | [CVE-2017-15411](https://patchblox.com/security/data/cve/CVE-2017-15411.md) | Routine | chromium-browser: Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap... | n/a | 0.0158 | | | [CVE-2017-15408](https://patchblox.com/security/data/cve/CVE-2017-15408.md) | Routine | chromium-browser: Heap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially explo... | n/a | 0.0154 | | | [CVE-2017-15420](https://patchblox.com/security/data/cve/CVE-2017-15420.md) | Routine | chromium-browser: Incorrect handling of back navigations in error pages in Navigation in Google Chrome prior to 63.0.3239.84 allowed a... | n/a | 0.0154 | | | [CVE-2017-15423](https://patchblox.com/security/data/cve/CVE-2017-15423.md) | Routine | chromium-browser: Inappropriate implementation in BoringSSL SPAKE2 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to... | n/a | 0.0151 | | | [CVE-2017-15417](https://patchblox.com/security/data/cve/CVE-2017-15417.md) | Routine | chromium-browser: Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a rem... | n/a | 0.0151 | | | [CVE-2017-15416](https://patchblox.com/security/data/cve/CVE-2017-15416.md) | Routine | chromium-browser: Heap buffer overflow in Blob API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially expl... | n/a | 0.0151 | | | [CVE-2017-15419](https://patchblox.com/security/data/cve/CVE-2017-15419.md) | Routine | chromium-browser: Insufficient policy enforcement in Resource Timing API in Google Chrome prior to 63.0.3239.84 allowed a remote attack... | n/a | 0.0129 | | | [CVE-2017-15424](https://patchblox.com/security/data/cve/CVE-2017-15424.md) | Routine | chromium-browser: Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perfor... | n/a | 0.0119 | | | [CVE-2017-15425](https://patchblox.com/security/data/cve/CVE-2017-15425.md) | Routine | chromium-browser: Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perfor... | n/a | 0.0116 | | | [CVE-2017-15426](https://patchblox.com/security/data/cve/CVE-2017-15426.md) | Routine | chromium-browser: Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perfor... | n/a | 0.0116 | | | [CVE-2017-15427](https://patchblox.com/security/data/cve/CVE-2017-15427.md) | Routine | chromium-browser: Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a socially engineered user... | n/a | 0.0086 | | | [CVE-2017-15430](https://patchblox.com/security/data/cve/CVE-2017-15430.md) | Routine | chromium-browser: Insufficient data validation in Chromecast plugin in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to... | n/a | 0.0052 | | --- Data as of 2026-11-12T01:51:14Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.