A single malformed WAP Push SMS can crash com.android.phone on Android with zero victim interaction, dropping calls including emergency calls. Mark Blaszczyk has published full disclosure of the silent remote denial-of-service issue.