CVE-2025-20747 is a vulnerability in the GNSS service caused by an incorrect bounds check that may lead to an out-of-bounds write. This flaw can allow local escalation of privilege if the attacker already has System privilege. Exploitation does not require user interaction.