Warning for Android Users: SMS Vulnerability Can Crash Phones
Mumbai, October 30: A serious security risk has emerged for Android smartphone users due to a vulnerability known as “SMS of Death.” This flaw allows cybercriminals to crash essential phone services by sending a specific type of SMS, without requiring the user to open the message or click any links. Google has released a security fix to address this issue.
The “SMS of Death” vulnerability is classified as a zero-click security flaw, meaning attackers do not need to wait for user error to exploit it. A specially crafted message can cause significant problems once it reaches the phone. Security researcher Mark Blaszczyk reported this flaw to Google on May 5, 2026, and technical details were made public on October 29.
The vulnerability is linked to the WAP Push message processing system within Android’s telecom framework. A flaw in this system related to data length checks could lead to crashes when processing these specially formatted messages. The impact is primarily on the com.android.phone system process, which manages calling and mobile network activities, potentially leading to dropped calls and temporary loss of mobile network services, including emergency calls.
Researchers tested the vulnerability on Google Pixel 9 and various Samsung Galaxy devices. The weak code has existed since Android 12, and a concerning aspect of this attack is that the malicious message does not appear in the user’s SMS inbox, making it undetectable. In controlled tests, repeatedly sending messages caused prolonged network service disruptions on affected devices.
To fix the issue, Google modified the open-source code of Android on June 15, 2026, and subsequently provided security updates to device manufacturers. This fix aims to ensure that processing an incorrect WAP Push message does not crash the entire telecom system. The vulnerability is tracked under CVE-2026-58882.
Android users are advised to install the latest security updates on their smartphones. They should check the Software Update or System Update options in their Settings. While Google has issued the fix, it may take time for updates to reach devices from various manufacturers. Users of brands like Samsung, Xiaomi, OnePlus, and Motorola should ensure they check for available security patches for their phones.
Bhupendra Singh Chundawat is a seasoned technology journalist with over 22 years of experience in the media industry. He specializes in covering the global technology landscape, with a deep focus on manufacturing trends and the geopolitical impact on tech companies. Currently serving as the Editor at Udaipur Kiran, his insights are shaped by decades of hands-on reporting and editorial leadership in the fast-evolving world of technology.