CVE-2026-37225

Name of the Vulnerable Software and Affected Versions FlexRIC version 2.0.0

Description A validation mismatch between layers allows a remote unauthenticated attacker to crash the iApp process on port 36422 via SIGABRT. The issue occurs when the iApp receives an 'E42 RIC SUBSCRIPTION REQUEST' containing an empty ricEventTriggerDefinition field; while the E42 layer decoder accepts the empty field as valid, the E2AP encoder enforces a non-empty constraint when forwarding the request, leading to the crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.