Zero-click 'SMS of Death' flaw lets one malformed text crash Android phone service
VULNERABILITYAndroidredteam/daily · 2 sources
- Severity
- Medium
- Sources
- 2
What happened
A zero-click Android flaw dubbed 'SMS of Death' lets an attacker crash the com.android.phone process with one malformed WAP Push message, dropping active calls and causing one to two seconds without service per message. Around 30 messages in quick succession can corrupt the SMS SQLite database, leaving the phone app crashing on every boot, and carrier retries of unacknowledged messages can re-trigger the problem after a factory reset. Google has marked the report 'Won't Fix' as a non-security issue, according to the researcher's disclosure site.
For IT people · Written by AI from 2 sources · Wrong?
What to do
- Check whether you use the affected product, and install the vendor’s fix when it is available. Open your watchlist
General advice for this kind of story
Full story timeline · 2 updates
Who reported · 2 outlets
Cyber Security NewsGBHackers
Who and what is in it
Companies