Android 'SMS of Death' flaw crashes calls, fix due in November
Researcher Mark Blaszczyk disclosed CVE-2026-58882, a flaw where a crafted SMS silently crashes Android's calling service, dropping calls including to emergency services. Around 20 such messages can push a device into a bootloop. Google fixed the bug in June and the patch is slated for the November security bulletin.
- Flaw affects code dating back to Android 12, reproduced on Pixel and Galaxy
- About 20 malicious texts can trigger a persistent bootloop
- Google fixed the bug on June 15 after initially dismissing the report
- Rated Critical, the fix is slated for the November bulletin
Read next
Policy