Researcher releases exploit for Android 'SMS of Death' flaw that can crash phones via text message

Summary

A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability called "SMS of Death," tracked as CVE-2026-58882. The flaw lets an attacker remotely disrupt cellular service or crash a phone by sending a specially crafted text message. According to reporting, the attack can also disconnect ongoing calls and leave a phone stuck in a reboot loop, and the recipient does not need to take any action for it to take effect. The vulnerability has already been patched, so the exploit mainly matters for devices that have not yet received the fix.

Timeline

1. BleepingComputer

   31 Oct 2026, 15:35 UTCSource ↗

   BleepingComputer reports that a security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS of Death" and tracked as CVE-2026-58882, that lets attackers remotely disrupt cellular service or crash phones with a specially crafted text message.

2. Digital Trends

   1 Nov 2026, 01:50 UTCSource ↗

   Digital Trends reports that a security researcher has uncovered a serious Android vulnerability, dubbed "SMS of Death," that allows an attacker to remotely crash a smartphone with a specially crafted text message, disrupting cellular service, disconnecting ongoing calls, and possibly leaving the phone in a reboot loop.