Android SMS exploit can crash phones without user interaction

Technology · First reported 2 Nov, 04:08 · Updated 04:10

Image: Wikimedia Commons · NASA Earth Observatory image by Lauren Dauphin, using Landsat data from the U.S. Geological Survey. Story by Adam Voiland. · Public domain

A published exploit can send a crafted text that crashes cellular functions on affected Android phones. The supplied report says Android 14–17 received a fix in the October 2026 security updates, while Android 12 and 13 did not; a separate brief warns that older devices remain at risk.

The exploit uses a crafted text message and can crash a phone without the recipient interacting with it.
The report says Android 14–17 received a fix in the October 2026 security updates, while Android 12 and 13 did not receive one.
The report advises checking for and installing available system or security updates; patch availability may vary by device maker and carrier.

Summary written by Lux AI from 2 articles

Key facts

Flaw identifier: CVE-2026-58882
Affected versions without a fix: Android 12 and 13
Versions reported as fixed: Android 14 through 17, in the October 2026 security updates
Reported attack method: A crafted data SMS; the target does not need to interact with it
Reported impact: Crashes affecting cellular service, with calls in progress potentially dropped