New Android SMS of Death exploit can remotely crash unpatched phones
Summary
A security researcher has released a proof-of-concept exploit for a critical Android vulnerability, referred to as "SMS of Death" and identified as CVE-2026-58882. This exploit allows attackers to remotely crash unpatched Android phones or disrupt their cellular service by sending a maliciously crafted SMS message.
IFF Assessment
This vulnerability allows attackers to remotely crash devices and disrupt service, which is detrimental to users and defenders.
Severity
The exploit allows for remote code execution and denial of service, affecting critical system functions and requiring no user interaction, indicating a high CVSS score.
Defender Context
This vulnerability highlights the ongoing risk of SMS-based attacks, even on patched systems if users haven't updated their devices. Defenders should ensure their mobile device management policies prioritize timely patching and consider implementing SMS filtering or sanitization solutions to mitigate such risks.