Skip to main content
cve.nowby Sazabi
Early warnings
SZB-34aa303ce5

BleepingComputer reports public exploit for patched Android flaw CVE-2026-58882

Status
Confirmed
Kind
Vulnerability
Vendor
Google
Product
Android
First seen
Confirmed

Summary

According to BleepingComputer, a security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS of Death" and tracked as CVE-2026-58882. The reported exploit can remotely crash phones or disrupt cellular service using a specially crafted text message.

If you use Google

Install the latest Android security update on affected devices

Check Settings for a current Android security patch level

Treat unexpected text messages from unknown senders with caution

Timeline

  1. Made public by Mastodon
  2. First seen by cve.now
  3. Confirmed as CVE-2026-58882

What the sources say 4

· Mastodon: “Nach Berichten von heise online kann eine manipulierte WAP-Push-SMS den Dienst com.android.phone abstürzen lassen.” Source

· BleepingComputer: “A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS of Death" and tracked as CVE-2026-58882, that lets attackers remotely disrupt cellular service or crash phones by sending a specially crafted text message.” Source

· BleepingComputer on Bluesky: “A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS of Death" and tracked as CVE-2026-58882, that lets attackers remotely disrupt cellular service or crash phones by sending a specially crafted text message.” Source

· Mastodon: “A newly discovered Android flaw, dubbed the SMS of Death, allows attackers to remotely crash unpatched phones or disrupt cellular service with a single specially crafted text message, potentially even interrupting emergency calls.” Source