Android users alert! 'SMS of death' can crash phones without a single click, Google releases fix

San Francisco (The Uttam Hindu): A serious security vulnerability known as 'SMS of Death' has raised concerns among Android smartphone users. The zero-click flaw allowed specially crafted SMS messages to crash a phone's network and calling services without requiring users to open a message, click a link or download anything. Google has released a security fix to address the issue.

According to cybersecurity researchers, the vulnerability was linked to Android's WAP Push message processing system. A specially designed message could overload the background process responsible for calls, SIM connectivity and mobile network operations. This could lead to dropped calls, network failures and disruption of emergency calling services. Security researcher Mark Blaszczyk reportedly discovered the flaw and informed Google on May 5, 2026. The vulnerability was tested on Google Pixel 9 and several Samsung Galaxy flagship devices. Researchers also found that the issue had existed since Android 12.

The vulnerability has been identified as CVE-2026-58882. Google reportedly corrected the affected code in the Android Open Source Project on June 15, 2026, and shared the security patch with smartphone manufacturers. Android users are advised to check for the latest software updates by visiting Settings and selecting System Update or Software Update. Users of Samsung, Xiaomi, OnePlus, Vivo, Oppo, Realme and Motorola devices should install the latest available security updates to protect their phones.