CVE-2015-4111

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-07-20 · updated 2026-06-17
Weakness: CWE-20

Description

mc_demux_mp4_ds.ax in an unspecified third-party codec demux in BlackBerry Link before 1.2.3.53 with installer before 1.1.0.22 allows remote attackers to execute arbitrary code via a crafted MP4 file.

Affected products

Blackberry Link: through 1.2.3.52

References

http://www.blackberry.com/btsc/KB37207
http://www.securityfocus.com/bid/75950
http://www.securitytracker.com/id/1032969
http://www.blackberry.com/btsc/KB37207
http://www.securityfocus.com/bid/75950
http://www.securitytracker.com/id/1032969

Get alerted when CVE-2015-4111 or the next vulnerability affects your stack