Security researchers describe a newly disclosed “SMS of Death” vulnerability that can cause Android phones to malfunction when they receive specially crafted text messages. The reported issues include disrupting cellular service and, in some cases, crashing or rendering the device unusable, depending on the phone and whether the device is patched.
One report says the proof-of-concept targets a vulnerability identified as CVE-2026-58882 and is linked to a recently patched Android flaw. Another highlights how the behavior is tied to a crafted WAP Push SMS message, which Android’s telephony framework handles incorrectly in the background rather than treating it like a normal inbox message.
Across outlets, the core technical theme is consistent: a remote attacker can trigger the problem purely through an incoming SMS message. The accounts differ mainly in emphasis—one focuses on the named CVE and proof-of-concept, while the other concentrates on the specific Android version range and the practical symptoms such as call drops, temporary loss of cellular connectivity, and severe outcomes after repeated messages.
