Mark Blaszczyk

Stories

Google fixes zero-click Android SMS crash, but calls it non-security

Published full disclosure and proof of concept on October 29, after Google's final non-security ruling that day

Google reportedly shipped a fix for the Android 'SMS of Death' crash in its October 2026 security updates for Android 14 through 17, according to the researcher who found it. Reports now cite CVE-2026-58882 for the zero-click flaw, which lets one malformed text message crash the phone service and drop calls, including emergency calls.

Updated Nov 2