Covered by 2 outlets — first reported by BleepingComputer, Oct 31, 15:35 UTC
New Android SMS of Death exploit can remotely crash unpatched phones
Summary
A security researcher has released a proof-of-concept exploit for a recently patched Android flaw dubbed "SMS of Death" and tracked as CVE-2026-58882. A specially crafted text message can remotely disrupt cellular service or crash phones that have not been updated. Security Affairs reports the attack needs no interaction from the victim and can interrupt calls, including emergency calls.
AI summary by the SecurityTabs newsroom, checked against BleepingComputer, Security Affairs. Read the outlets below for the full story.
Continue reading
2 outlets, in the order they reported it.
BleepingComputerFirst report
New Android SMS of Death exploit can remotely crash unpatched phones
A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS of Death" and tracked as CVE-2026-58882, that lets attackers remotely disrupt cellular service or crash phones by…
Security Affairs
SMS of Death: Android under attack, an invisible SMS can block calls and emergency services
SMS of Death lets attackers crash Android call services with a hidden, zero-click message, blocking phone calls, even emergency calls too.
Explained
The technology and terms in this story. Learn more
- ConceptProof of conceptA demonstration that a flaw can be exploited, usually published by researchers.
- ConceptExploitCode or a technique that turns a software flaw into something an attacker can actually use.
- ConceptCVE · Common Vulnerabilities and ExposuresThe public ID system for vulnerabilities, such as CVE-2026-12345, so everyone means the same bug.