Invisible Texts, Visible Damage: Inside Android’s “SMS of Death” Zero-Click Flaw
A recently disclosed zero-click vulnerability—dubbed the "SMS of Death"—can render Android phones partially or wholly unusable with a single, malformed WAP Push message. The exploit leaves no trace in the user’s inbox, can drop active calls, and in some tests caused persistent loss of telephony that survived reboots and even factory resets until carriers’ retry behavior was addressed. How the flaw works The bug resides in WapPushOverSms.decodeWapPdu(), the Android routine…