CVE-2025-20727 is a heap buffer overflow vulnerability in a modem component that allows an out-of-bounds write. Exploitation can lead to remote escalation of privilege without user interaction if a user equipment (UE) connects to a rogue base station controlled by an attacker.