Skip to content

Instantly share code, notes, and snippets.

View symbuzzer's full-sized avatar

Ali Beyaz symbuzzer

112 followers · 5 following
View GitHub Profile
@symbuzzer
symbuzzer / fasciMGate.md
Created January 20, 2026 14:34
"fasciMGate" - Symbian UIQ 2.0 Persistent Brick vulnerability (CVE-2026-XXXXX)

CVE-2026-XXXXX – Public Disclosure

Overview

A persistent denial-of-service vulnerability exists in devices running Symbian OS 7.0 UIQ 2.0 and UIQ 2.1.

The vulnerability is triggered by corruption of the system file: C:\System\Data\colorscm.dat When this file is replaced with an empty or malformed file, the device becomes unstable and eventually enters an unrecoverable boot state, effectively bricking the device.

@symbuzzer
symbuzzer / Delightmare.md
Last active January 24, 2026 12:46
"Delightmare" - Delight CFW (custom firmware) 0 day Logic Flaw vulnerability (CVE-2025-65885)

CVE-2025-65885 – Public Disclosure

Summary

A critical vulnerability exists in Delight Custom Firmware (CFW) for Symbian Belle devices that allows arbitrary command execution during boot, leading to a persistent bootloop and potential silent code execution without user interaction.

The issue is triggered by the presence of a specially crafted text file (Delight.txt) placed in a specific data directory (E:\Data\). The file contents are parsed and executed during the boot process without proper validation or user consent.

This behavior strongly suggests the presence of either:

  • an unintended logic flaw, or
  • a deliberate backdoor-like mechanism introduced by the firmware.