Particle.news
Get it on Google Play
Download on the App Store
4 ARTICLES
·
4h ago

Invisible WAP‑Push 'SMS Des Todes' Crashes Android Phones

A single hidden operator-style SMS can force restart loops that interrupt calls and can lead to total data loss if users choose a factory wipe.

Image
Eine manipulierte WAP-Push-Nachricht lässt Smartphones ohne Zutun neu starten.
Image

Overview

  • Reporters disclosed the flaw on Friday after researcher Mark Blaszczyk published reproductions showing a single invisible WAP‑Push SMS can repeatedly crash Android’s telephony process.
  • The bug is caused by an unchecked typecast in WSP header handling that turns a manipulated length into a negative array size and throws a NegativeArraySizeException in com.android.phone.
  • Devices running Android 12 through 17 are vulnerable in tests, Google has pushed fixes for Android 14–17 into AOSP, and protection for most users depends on OEM and carrier update rollouts.
  • Affected phones can enter restart loops that interrupt active calls including emergency calls and then show a recovery prompt that will erase all data if the user selects 'Wipe data'; recovery without data loss is possible by connecting the phone to a PC and using Android Debug Bridge or by seeking professional help.
  • The issue carries CVE‑2026‑58882, the researcher reported the bug privately months earlier, and an initial 'Will Not Fix' closure and staggered patch timing highlight coordination problems that could leave many older devices exposed and open to persistent re-delivery from carriers.