CYBERSECURITYTRACKER
Permanent story citation

New Android SMS of Death exploit can remotely crash unpatched phones

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11990

As cited

Copy frozen at (site build).

vulnerabilities

New Android SMS of Death exploit can remotely crash unpatched phones

A security researcher released a proof-of-concept exploit for CVE-2026-58882, an Android vulnerability called SMS of Death that allows attackers to remotely disrupt cellular service or crash phones via specially crafted text messages. The flaw has been patched, but unpatched devices remain vulnerable to remote exploitation through SMS delivery.

Why it matters: Android users on unpatched devices face immediate risk of service disruption or phone crashes from a single text message; device owners and enterprise mobile device management teams should verify patch status urgently.

VendorsGoogle
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary