VULNERABILITY INTELLIGENCE
CVE-2015-4111
CVSS score6.8 MEDIUM
EPSS probability4.42%
CISA KEVNot currently listed
Published2015-07-20
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
mc_demux_mp4_ds.ax in an unspecified third-party codec demux in BlackBerry Link before 1.2.3.53 with installer before 1.1.0.22 allows remote attackers to execute arbitrary code via a crafted MP4 file.
Weakness classification
- CWE-20: Improper Input Validation