New Delhi, Nov. 1 -- A single text message that never appears in the inbox can crash the part of an Android phone that handles calls, according to a researcher who has now published a working exploit. The flaw, nicknamed SMS of Death and tracked as CVE-2026-58882, has already been patched by Google, but a public exploit raises the stakes for phones that have not yet received the update.

Security researcher Mark Blaszczyk disclosed the bug on Thursday, October 29, according to heise. Reports describe it as a zero-click attack, meaning the owner does not have to open or even see the message for it to work.

One technical analysis says the trigger is a malformed eight-byte WAP Push message, sent as a data SMS to port 2948, that breaks the W...