Technical details and proof-of-concept code have been published for a vulnerability that can disable Android's cellular functionality with a single SMS and no user interaction. Fixes are available for Android 14–17, while older devices, including those running Android 12 and 13, remain outside their scope.

Key points

What happened: A zero-click vulnerability in Android's WAP Push SMS processing can disable phone functionality without user interaction; technical details and proof-of-concept code are now public

Why it matters: Ongoing calls, including emergency calls, are disconnected. If repeated messages cause a reboot loop, ordinary users cannot distinguish it from a failure requiring a factory reset

Fix coverage: Google's fix is available for Android 14–17 but does not reach Android 12 or 13.…