CVE-2025-65885 — MEDIUM (5.1)

Vulnerability Description

An issue was discovered in the Delight Custom Firmware (CFW) for Nokia Symbian Belle devices on Nokia 808 (Delight v1.8), Nokia N8 (Delight v6.7), Nokia E7 (Delight v1.3), Nokia C7 (Delight v6.7), Nokia 700 (Delight v1.2), Nokia 701 (Delight v1.1), Nokia 603 (Delight v1.0), Nokia 500 (Delight v1.2), Nokia E6 (Delight v1.0), Nokia Oro (Delight v1.0), and Vertu Constellation T (Delight v1.0) allowing local attackers to inject startup scripts via crafted .txt files in the :\Data directory.

CVSS Score

5.1

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

LOW

Availability

NONE

Affected Products

Vendor	Product	Versions
Symwld	Delight Custom Firmware	1.8
Nokia	808 Pureview	-
Nokia	C7	-
Nokia	N8	-
Nokia	E7	-
Nokia	701	-
Nokia	C6-01	-
Nokia	500	-
Nokia	700	-
Nokia	603	-
Nokia	E6	-
Nokia	Oro	-
Nokia	Vertu Constellation T	-

Related Weaknesses (CWE)

CWE-77

References

https://gist.github.com/symbuzzer/3315e88adc2bba0b6cc66d192b49546dThird Party Advisory
https://www.symwld.com/delight/Product

FAQ

What is CVE-2025-65885?

CVE-2025-65885 is a vulnerability with a CVSS score of 5.1 (MEDIUM). An issue was discovered in the Delight Custom Firmware (CFW) for Nokia Symbian Belle devices on Nokia 808 (Delight v1.8), Nokia N8 (Delight v6.7), Nokia E7 (Delight v1.3), Nokia C7 (Delight v6.7), Nok...

How severe is CVE-2025-65885?

CVE-2025-65885 has been rated MEDIUM with a CVSS base score of 5.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-65885?

Check the references section above for vendor advisories and patch information. Affected products include: Symwld Delight Custom Firmware, Nokia 808 Pureview, Nokia C7, Nokia N8, Nokia E7.