[CLSTR]
API
< Back to all clusters
[TECHNOLOGY] · 41 sources

started · updated

Part of situation: Messaging app and mobile security vulnerabilities (3 clusters)

Android SMS of Death vulnerability allows remote device crashes

SMS of Death CVE-2026-58882 Android vulnerability WAP Push zero-click attack

Security researcher Mark Blaszczyk has disclosed a zero-click denial-of-service vulnerability in Android, dubbed the “SMS of Death” (CVE-2026-58882). The flaw allows attackers to remotely disrupt cellular services or cause devices to enter continuous reboot loops by sending a specially crafted eight-byte WAP Push message via SMS.

The vulnerability stems from improper validation of a header-length value within the WapPushOverSms.decodeWapPdu function. When processed, this value triggers a NegativeArraySizeException, crashing the com.android.phone process. Because the message is processed before reaching the SMS inbox, victims receive no notification or visible indication of the attack. The crash can interrupt active calls, including emergency services.

Testing indicates that sending approximately 20 malicious messages can trap a device in a reboot loop. In some cases, devices may require a factory reset or technical intervention via Android Debug Bridge (ADB) to recover, as carriers may attempt to redeliver the messages, triggering repeated crashes.

Google reportedly released a fix in its October 2026 security updates for Android versions 14 through 17. However, devices running Android 12 and 13 may remain vulnerable if they no longer receive regular security support from their manufacturers.

Entities

Android · Android · Google · Google Pixel · Google Pixel · Mark Blaszczyk · NebuSec · Samsung · Samsung Galaxy · Telegram

Claims

What the coverage asserts, and how many sources carry each claim.

Sources

Proof-of-concept exploit released for Android 'SMS of Death' flaw [itmagazineme.com]
Android, cos'è l'“SMS of Death”, il messaggio invisibile che manda in crash lo smartphone | CMAG [www.cellulare-magazine.it]
क्या है SMS ऑफ डेथ? कबाड़ बना देगा आपका स्मार्टफोन, करोड़ों पर संकट [www.aajtak.in]
New Android SMS of Death exploit can remotely crash unpatched phones [cybernoz.com]
Android’s new ‘SMS of Death’ exploit can crash your phone without you doing anything [dailyguardian.ae]
"SMS da Morte" pode bloquear o seu Android sem tocar em nada! Saiba como se proteger [pplware.sapo.pt]
Android死亡簡訊漏洞！免點擊也會變磚，舊版2版本全中標 - 瘋先生 [mrmad.com.tw]
SMS invisível pode cortar chamadas em telemóveis Android [www.techenet.com]
Ny Android-fejl: En enkelt sms kan gøre din telefon ubrugelig [trend.dk]
Warnung vor der SMS des Todes - Wöchentlich [wochentlich.de]
SMS of Death: un SMS invisible bloquea llamadas Android [www.androidsis.com]
SMS des Todes: Warnung vor Angriff per Kurzmitteilung [www.t-online.de]
SMS des Todes: Warum Ihr Telefon abstürzt und neu startet [www.fehmarn24.de]
„SMS of Death“: Android-DoS über WAP-Push ohne Interaktion [www.it-boltwise.de]
SMS des Todes: Warum Ihr Telefon abstürzt und neu startet [www.leinetal24.de]
Nieuwe ‘SMS of Death’-bug laat Android-telefoons onherstelbaar crashen [techpulse.be]
Handys starten ständig neu: „SMS des Todes“ sorgt für Probleme bei Android-Smartphones [www.5min.at]
Wiadomość, której nigdy nie zobaczysz, zamieni Twój telefon z Androidem w przycisk do papieru [www.chip.pl]
Android telefonları tek SMS ile kullanılmaz hale getiren açık keşfedildi [www.donanimhaber.com]
Android「死亡短訊」漏洞曝光　毋須點擊也可令手機失去通訊-ePrice. HK [www.eprice.com.hk]
Android-Sicherheitslücke: SMS des Todes: Warum Ihr Telefon abstürzt und neu startet [ga.de]
谷歌已修复：安卓“死亡短信”漏洞曝光，一条短信就能打断你的通话 - IT之家 [www.ithome.com]
Critical Android flaw lets a single hidden text knock phones off the network [kenya-today.com]
Uma simples SMS pode bloquear o teu Android e interromper chamadas para o 112! [www.leak.pt]
Un SMS invisible fait crasher Android et coupe les appels d'urgence [www.linformatique.org]
Android「死亡簡訊」漏洞曝光　不點連結也可令手機失去通訊 [m.eprice.com.tw]
„SMS-ul morții” poate bloca telefoane Android fără să deschizi mesajul; Cum scapi de asta? [www.mobilissimo.ro]
Android tiene una vulnerabilidad que puede dejar tu teléfono inutilizable con un SMS malicioso [pisapapeles.net]
SMS of Death: Android under attack, an invisible SMS can block calls and emergency services [securityaffairs.com]
SMS of Death Açığı: Android'de Çökme ve Yama Detayları [shiftdelete.net]
SMS of Death: Ένα SMS που δεν φαίνεται κόβει κλήσεις σε κινητά Android [techblog.gr]
SMS of Death bug can crash your Android phone [www.technobaboy.com]
SMS of Death: Google ha corretto la falla, ma non è chiaro quando tutti gli smartphone saranno protetti [www.tuttoandroid.net]
« SMS de la mort » : votre smartphone pouvait être paralysé sans même toucher à l'écran [www.universfreebox.com]
'SMS da Morte' derruba ligações e trava celulares Android sem você clicar em nada [canaltech.com.br]
Android SMS of Death Flaw Threatens Calls and Phones [www.esecurityplanet.com]
A new vulnerability can brick your Android phone when receiving the SMS of Death [www.gsmarena.com]
This Android SMS Of Death Attack Crashes Phones Without A Single Tap [hothardware.com]
SMS des Todes: Sicherheitslücke legt Android-Handys lahm [www.teltarif.de]
SMS des Todes: Warum Ihr Telefon abstürzt und neu startet [www.wz.de]
Android’s new ‘SMS of Death’ exploit can crash your phone without you doing anything [www.digitaltrends.com]