Proof of concept exploit released for Android SMS vulnerability

A security researcher has released a proof of concept exploit for a recently patched Android flaw that lets attackers remotely disrupt cellular service or crash vulnerable devices, BleepingComputer, Mezha.net, and The 420.in all reported. The zero click denial of service vulnerability, tracked as CVE-2026-58882, is known as the SMS of Death. [1][4][6]

According to BleepingComputer, Mezha.net, and The 420.in, the flaw allows attackers to trigger disruptions simply by sending a specially crafted text message. BleepingComputer noted that the issue can interrupt ongoing phone calls and cause unpatched devices to crash without requiring any user interaction. [1][4][6]

Cybernews reported that the invisible message traps affected victims in a reboot loop that lasts until a factory reset is performed. Google develops the Android mobile operating system on a regular update schedule, releasing security fixes to address critical vulnerabilities in the software platform. [5][7]

BleepingComputer, Mezha.net, and The 420.in reported that the exploit target is a recently patched flaw. Android Authority added that a fix for the vulnerability is coming soon to protect users from potential remote denial of service attacks. [1][3][4][6]