CVE-2025-65885

Name: CVE-2025-65885
Creator: NVD / NIST
Published: 2025-12-26T15:15:47.357+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

MEDIUMCVSS 5.1/10EPSS 0.12%

Last modified Jun 17, 2026

CVE-2025-65885 is a medium-severity vulnerability rated 5.1/10 on the CVSS scale. An issue was discovered in the Delight Custom Firmware (CFW) for Nokia Symbian Belle devices on Nokia 808 (Delight v1.8), Nokia N8 (Delight v6.7), Nokia E7 (Delight v1.3), Nokia C7 (Delight v6.7), Nokia 700 (Delight v1.2), Nokia 701 (Delight v1.1), Nokia 603 (Delight v1.0), Nokia 500 (Delight v1.2), Nokia E6 (Delight v1.0), Nokia Oro (Delight v1.0), and Vertu Constellation T (Delight v1.0) allowing local attackers to inject startup scripts via crafted .txt files in the :\Data directory.. EPSS estimates a 0.12% chance of exploitation in the next 30 days.

Description

An issue was discovered in the Delight Custom Firmware (CFW) for Nokia Symbian Belle devices on Nokia 808 (Delight v1.8), Nokia N8 (Delight v6.7), Nokia E7 (Delight v1.3), Nokia C7 (Delight v6.7), Nokia 700 (Delight v1.2), Nokia 701 (Delight v1.1), Nokia 603 (Delight v1.0), Nokia 500 (Delight v1.2), Nokia E6 (Delight v1.0), Nokia Oro (Delight v1.0), and Vertu Constellation T (Delight v1.0) allowing local attackers to inject startup scripts via crafted .txt files in the :\Data directory.

Metrics

CVSS 3.1

5.1/10

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS Probability

0.12%

2.0th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-77

Affected Software

Vendor	Product	Versions
Symwld	Delight Custom Firmware	1.8
Symwld	Delight Custom Firmware	6.7
Symwld	Delight Custom Firmware	1.3
Symwld	Delight Custom Firmware	1.1
Symwld	Delight Custom Firmware	1.2
Symwld	Delight Custom Firmware	1.0

References

https://gist.github.com/symbuzzer/3315e88adc2bba0b6cc66d192b49546dThird Party Advisory
https://www.symwld.com/delight/Product

Timeline

Published: Dec 26, 2025
Last Modified: Jun 17, 2026
Status: Analyzed

Frequently Asked Questions

What is CVE-2025-65885?

How severe is CVE-2025-65885?

CVE-2025-65885 has a CVSS score of 5.1/10 (MEDIUM severity). The EPSS model estimates a 0.12% probability of exploitation in the next 30 days.

How do I fix CVE-2025-65885?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2025-65885?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST