A single malformed WAP Push SMS crashes com.android.phone on Android. Zero-click, remote, drops emergency calls. Patched in the October 2026 Android update. Download APK Source ⚠ Working proof-of-concept, authorised testing only. Read the warning & license before downloading. When Android receives a WAP Push message, WapPushOverSms.decodeWapPdu() reads the WSP header length as a uintvar.