Google Has Patched It: Android “SMS of Death” Flaw Exposed — One Text Can Drop Your Call
Security researcher Mark Blaschczyk found a zero-click denial-of-service flaw in Android, dubbed the “SMS of Death”: insufficient length checks when handling WAP Push messages can crash call-related processes, so a single crafted text can stall calls for 1–2 seconds or drop an ongoing call, and about 20 messages can leave some phones unusable for long stretches. Reported to Google in May 2026, the flaw was fixed in open-source code in June and included in October security updates for Android 14 to 17. Because the malicious texts do not show up in ordinary messaging apps and carriers may repeatedly redeliver them, users should install the latest security update promptly.
SOURCES
- IT之家2026-10-30 05:59