Recently, cybersecurity researchers disclosed a major security vulnerability affecting Android devices, drawing significant public attention. This vulnerability allows attackers to launch remote attacks through specially crafted text messages and can even directly cause phone malfunctions without the user noticing and without requiring any clicks or interaction. Because the attack can be triggered simply by sending a message, researchers have dubbed it the “SMS of Death” vulnerability.
A newly discovered Android “death SMS” vulnerability can crash phones in standby mode.
According to research, once a device receives a specially crafted malicious message, the phone’s cellular network functionality may be immediately affected, not only causing mobile communication service interruptions but also potentially forcing ongoing calls to be disconnected. More seriously, in some cases, the device may even get stuck in an infinite loop of repeated restarts, making the phone almost unusable.
This vulnerability was assigned CVE-2026-58882 and was discovered by security researcher Mark Blaszczyk. He first reported the issue to Google in May of this year, and then continued verification and testing. By October 29, he successfully reproduced the attack scenario on Google Pixel and Samsung Galaxy series phones, andPublicly release research results and practical, working demonstration examples., proving that this vulnerability indeed poses a real-world threat. Google subsequently developed a patch, but when it can be fully rolled out to all Android devices still depends on further coordination from various brands and telecom operators.
Many users may worry whether their phones are affected. In fact, the issue is not limited to a specific brand but is related to the Android version and security update status of the device. Blaszczyk said Google has included the patch in the October 2026 Android security update and provided it for Android 14 through Android 17. However, Google’s security bulletin released that month did not specifically mention this vulnerability, so many users may not know they have already received the relevant patch.
It is worth noting that a large number of older devices running Android 12 and Android 13 have still not received the fix update. For phones that have stopped or are about to stop receiving security support, the associated risks remain. Researchers recommend that all Android users check their device’s security patch level and install the latest system updates as soon as possible to reduce the likelihood of being attacked. Although menu interfaces vary slightly by phone brand, the relevant information can usually be found under System Information or Security options in Settings.
However, the researchers also emphasized that this vulnerability is a typical denial-of-service (DoS) attack, designed to cripple device functions rather than steal account passwords, photos, or other personal data. To date, there is also no evidence that the vulnerability has been used in large-scale real-world attacks.
As for why a single text message can crash a phone, the key lies in how the Android system handles WAP Push messages. These messages are usually received and processed automatically by the system in the background and do not appear in the regular SMS inbox, so users are often unaware of their existence. Researchers found that if the message format is deliberately constructed into an abnormal state, it can trigger a bug in the Android telephony framework, which in turn causes the system process responsible for managing cellular network connections to crash.
Once the relevant process stops working, the phone may immediately lose network connectivity, and any ongoing call will be forcibly disconnected, including calls to emergency services. In addition, if the carrier keeps trying to resend the same message, the device may trigger the error repeatedly. Test results show that about 20 malicious messages are enough to send some phones into an infinite reboot loop, leaving the device almost unusable.
If your device is unfortunately attacked, a factory reset is not the only solution. More technically proficient users can also use the Android Debug Bridge (ADB) tool to remove the problematic messages and thereby restore normal device operation. However, for most ordinary users, ADB has a relatively high barrier to entry, so regularly updating the system and keeping the latest security patches remains the simplest and most effective way to prevent such vulnerabilities.
Source: KOCPC Chinese