Can a text you never see crash your Android phone and drop a call — what is the ‘SMS of Death’ bug and what should you do today?

A hidden 8-byte WAP Push message (CVE-2026-58882) can crash Android’s phone process with no taps, dropping calls including emergency calls. Google patched Android 14–17 in October 2026; Android 12 and 13 did not get the fix — update today.

You are on an important call, your phone blinks, loses signal for two seconds, and the call is gone — and there is no strange text in your inbox to blame. Short answer: Yes — a hidden 8-byte WAP Push message (CVE-2026-58882, nicknamed SMS of Death) can crash Android’s phone process with zero taps from you, dropping active calls including emergency calls, and repeated messages can trap a phone in a reboot loop. Google patched Android 14 through 17 in its October 2026 security updates; Android 12 and 13 did not get the fix, per BleepingComputer’s Oct.

31 report. Why it matters: The message is processed before it reaches your inbox, so there is no link to avoid and no sender to block. The flaw misreads a header length, crashes com.android.phone, and the poisoned message can be retried on reboot.

What to do today, step by step:1. Update everything today. Open Settings > Security & privacy / About phone and install every available Android and Google Play system update, then restart.2.

Check your Android version. If you are on Android 12 or 13 and no update is offered, treat that phone as higher risk, avoid relying on it as your only emergency phone, and plan an upgrade to a still-supported model.3. Turn on automatic updates so maker and carrier patches install without you hunting for them.4.

If your phone starts rebooting repeatedly for no reason, do not keep factory-resetting in a panic — get help from your carrier or a repair shop first, because recovery can need technical tools.Common mistake: Thinking “I never open strange texts, so I am safe” — this one needs no opening at all; the update is the protection.Ad’s take: I hate bugs you cannot see coming, and this is exactly that kind. Five quiet minutes updating today beats a phone that quits on you when a call actually matters. Update — Nov 2, 2026: A working exploit for CVE-2026-58882 has now been published publicly, which raises the risk, because attackers no longer have to figure the bug out for themselves.

Repeated crafted messages can reportedly force repeated crashes — even a reboot loop. Google’s fix remains in the October 2026 security update for Android 14 through 17, and Android 12 and 13 still have no fix. The practical action is unchanged and urgent: check Settings > About phone > Android version for a security update level of October 2026 or later, and install any pending update today.

If a phone is stuck crashing, a computer connection with Android Debug Bridge can reportedly delete the bad message without a factory reset — a job for a repair shop if that sounds unfamiliar.