CVE-2020-0279: In the AAC parser, there is a possible out of bounds read due to a missing bounds check.

Security readout for executives and security teams

CVE-2020-0279 is an Android 11 AAC media parsing flaw. A malicious or malformed AAC file could cause an out-of-bounds read and expose information remotely. Exploitation requires user interaction, and the provided sources do not show active exploitation. Exposure is most relevant to Android 11 devices or builds that include the affected AAC parser and process untrusted AAC media. The sources do not identify specific device models, OEM patch levels, or non-Android products. Treat this as a medium-priority mobile platform risk. It is not shown as actively exploited, but it affects media parsing and may disclose information after user interaction, so remediation should follow normal Android security update cycles. Mitigation focus: Inventory Android 11 devices and their OEM security patch levels.; Check Android and OEM guidance for CVE-2020-0279 remediation status.; Prioritize updates for devices that process untrusted media content..

Prepared

Jun 3, 2026, 10:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.