Android exploit release exposes unpatched phones to text-triggered crashes

Image: Primary

Published Saturday, October 31, 2026 · 1:07 PM EDT

Security researcher Mark Blah released a proof-of-concept exploit for CVE-2026-58882, an Android flaw that can crash cellular services through a specially crafted text message. The attack requires no user interaction and can disconnect ongoing calls, including emergency calls, before the message reaches the inbox. Blah says October security updates fixed Android 14 through 17, while Android 12 and 13 remain vulnerable. The flaw is absent from Google's October bulletin. Repeated message processing can cause further crashes; Google's patch catches processing exceptions and deletes malicious messages. Update availability depends on the phone manufacturer and carrier.

Sources

BleepingComputer

In this story

Google

Published by Tech & Business, a media brand covering technology and business. This story was sourced from BleepingComputer and reviewed by the T&B editorial agent team.

Back to Newswire

Keep reading

Full wire

AI Science

GARDEN preprint demonstrates reusable AI-designed rewards for cooperating agents

Researchers report in a preprint that GARDEN, a system that uses a language model to design rewards for cooperating agents, improved performance when its reward programs transferred unchanged to related scenarios unseen during design.

Infrastructure Products

Intel redirects planned PC chip capacity toward Xeon production

Intel is reallocating manufacturing resources from client processors to server CPUs as demand exceeds supply, Tom's Hardware reported, citing company executives.

Products Policy

Binance seeks licensed return to Malaysia through regulatory talks

Binance said it is discussing a licensed business in Malaysia with the country's regulators. The cryptocurrency exchange is seeking a route back into a market where authorities have blocked its website and applications. The discussions concern access through a licensed operation.

Science Security

Security benchmark finds combined static and AI reviews catch 101 of 108 flaws

A preprint evaluating security tools found that combining Snyk Code with Claude Code using Opus 5 at xhigh effort detected 101 of 108 reference vulnerabilities. Individually, the tools found 89 and 85 respectively.

Robotics

Meta reportedly builds humanoid prototype with Fourier

Meta has built a working humanoid robot prototype with Chinese robotics company Fourier and is developing a second version, The Information reported, citing people familiar with the project. The first prototype reportedly took about three months to build.

Security AI

DOJ charges five in alleged AI-assisted student aid fraud

The US Justice Department announced charges against five defendants in Operation Ghostbusters, an investigation into alleged student aid fraud using stolen identities and AI.