Google Android Security Team

Stories

Google fixes zero-click Android SMS crash, but calls it non-security

Classed the crash as non-security but shipped a fix in October 2026 for Android 14-17

Google reportedly shipped a fix for the Android 'SMS of Death' crash in its October 2026 security updates for Android 14 through 17, according to the researcher who found it. Reports now cite CVE-2026-58882 for the zero-click flaw, which lets one malformed text message crash the phone service and drop calls, including emergency calls.

Updated Nov 2