Vulnerability · 2 sources · latest 1d

Public proof-of-concept exploit crashes unpatched Android phones via a crafted text message

VULNERABILITYAndroidredteam/daily · 2 sources

Severity: High
Exploited: Not known
Sources: 2

What happened

Security researcher Mark Blaszczyk has released a proof-of-concept for a zero-click denial-of-service flaw in Android, dubbed SMS of Death. A single crafted WAP Push message, sent on port 2948, crashes the com.android.phone process and can interrupt active calls, including emergency calls. The researcher reports reproducing it on Google Pixel 9 and Samsung Galaxy devices, with the vulnerable code present from Android 12 to Android 17.

For IT people · Written by AI from 2 sources · Wrong?

What to do

Check the Android security patch level on your device and install the October 2026 security update if it is available.
Treat devices on Android 12 or 13 as potentially exposed and check whether the manufacturer still provides updates.
If a device keeps crashing after a message is received, use the Android Debug Bridge from a computer to clear the queued messages, as described in the article.

Written by AI from the sources, checked against them

Read the full story at the source