CVE-2025-20746 is a vulnerability in the GNSS service caused by an incorrect bounds check leading to a possible out-of-bounds write. This flaw could allow a local attacker with System privileges to escalate their privileges further without requiring user interaction. The vulnerability has a CVSS score of 6.7, indicating a medium severity level.