A single malformed WAP Push SMS crashes com.android.phone on Android. Zero-click, remote, drops emergency calls. Patched in the October 2026 Android update.
The engineers over at Google seemingly don’t give a fuck? I think a bug that effectively prevents a potential victim from calling for help should have higher priority, and most countries see it the same way, this is not a wise choice.
The engineers over at Google seemingly don’t give a fuck? I think a bug that effectively prevents a potential victim from calling for help should have higher priority, and most countries see it the same way, this is not a wise choice.
It appears they fixed it when it was reported as another CVE?
https://github.com/advisories/GHSA-4vm2-jjcf-2h53
Google created the CVE.
Ah ok, still it seems to encompass the issue.