CVE-2025-20725 is a high-severity vulnerability in the ims service caused by a missing bounds check leading to a possible out-of-bounds write. Exploitation can result in remote escalation of privilege without requiring user interaction, if a user equipment (UE) connects to a rogue base station controlled by an attacker.