Zero click, silent, remote Android DoS

A critical vulnerability in Android's WAP Push SMS handler allows attackers to remotely crash the phone system with a single malformed text message, dropping all active calls including emergency calls with zero user interaction. The flaw stems from an unchecked integer cast that creates a negative array size, triggering an unhandled exception that terminates the telephony process; repeated messages can cause persistent denial of service and database corruption. Google has classified this as "Won't Fix" despite the severe impact, which includes silent delivery with no indication to the user of the attacker's identity.