CVE-2025-20725

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In ims service, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01671924; Issue ID: MSV-4620.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Nov 4, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-207267.5In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a CVE-2025-207278.1In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege, if a UE CVE-2025-207287.8In wlan STA driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privileCVE-2025-207294.2In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-20738.8Out-of-Bounds Read in netfilter/ipset in Linux Kernel ChromeOS [6.1, 5.15, 5.10, 5.4, 4.19] allows a local attacker with low privileges to tCVE-2025-207306.7In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilegeCVE-2025-207315.3In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-207325.3In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-207337.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-207345.3In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-207357.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-207366.7In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privileg
CVE-2025-20725: High severity, CVSS 7.5 | Vulnix