News and context with references. Check the publication date and source dates.
Cybersecurity researcher Mark Blaszczyk discovered a security vulnerability dubbed “SMS of Death” on Android devices. According to a report published on November 3, 2026, the vulnerability can disable cellular connectivity, disconnect calls, and cause phones to enter a bootloop. Devices running older Android versions that have not received the security patch are considered to remain vulnerable.
Messages are processed without notifications
The vulnerability was found on devices running Android 12 and later in various countries. According to Ubergizmo, the method is an evolution of the classic attack known as SMS of Death and uses WAP Push messages to disrupt a phone’s system.
The malicious message is sent silently and does not appear in the inbox or trigger standard message notifications. It is processed directly in the background by the Android telephony framework, so device owners may be unaware that the message has been received.
Once processed, the message can disrupt essential cellular services. Ongoing calls, including emergency calls, may be disconnected. Users may also temporarily lose their connection to the cellular network.
Repeated messages can trigger a bootloop
The impact of the attack can become more severe if an attacker sends around 20 messages within a short period. Under these circumstances, the phone may enter a bootloop, repeatedly restarting and failing to load the system normally.
In more severe cases, the attack risks bricking the phone, rendering it completely unusable. Recovery is said to be difficult because users may need assistance from a specialized technician or have to connect the device to a computer to manually remove corrupted system files.
Testing confirmed that the vulnerability affects several popular devices, including Google Pixel and Samsung Galaxy phones. However, the report did not specify every affected model.
Google prepares a security patch
Google responded to the finding by developing a security patch included in the October and November security updates. The patch is available for devices running Android 14 and later.
Once the update is installed, the system can identify malicious messages and immediately delete them before they are processed by the telephony framework. This mechanism is intended to prevent the messages from disrupting cellular connectivity or the device’s system.
Older phones that still run previous Android versions and have not received the patch remain at risk. Differences in update availability mean that each device’s level of protection depends on its system version and the security updates it receives.
Updates are a key protective measure
Users are advised to update their operating systems and install the security updates available for their respective devices. This step is necessary so the prepared fix can take effect before malicious messages are processed by the Android telephony system.
The threat demonstrates that messages that do not appear in the inbox can still affect a phone’s core functions. In this case, the impact is not limited to messaging disruptions but can also include loss of cellular connectivity, disconnected calls, repeated restarts, and the risk of the device becoming unusable.
