A single malformed text message can silently crash any Android phone and cut off emergency calls
Zero click, silent, remote Android DoS
A five-byte WAP Push SMS with a negative array length crashes com.android.phone on Android, dropping active calls including emergency calls with zero user interaction. Rapid sends corrupt the SMS SQLite database, bricking the phone on every boot. Google closed the report as a non-security issue across three tickets and four engineers. The fix is a single bounds check before the cast.
The consequence is perverse: the regulatory remedy for a phone that can't reach 000 is to cut it off the network, not to patch the OS.