New Android SMS of Death exploit can remotely crash unpatched phones

A security researcher has published a proof-of-concept exploit for a recently patched Android vulnerability known as 'SMS of Death', tracked as CVE-2026-58882. The flaw allows remote attackers to disrupt cellular service or crash Android phones by sending a specially crafted SMS message. The exploit requires no user interaction beyond receiving the malicious text. Unpatched devices remain vulnerable to remote disruption. The vulnerability highlights the risk of carrier-level or baseband SMS processing flaws in Android devices. Users and organizations are urged to apply the latest Android security patches to mitigate the risk.