CVE-2026-37230

Name of the Vulnerable Software and Affected Versions FlexRIC version 2.0.0

Description The near-RT RIC crashes when it receives a RIC INDICATION message containing a ran func id that is not present in its registry. This occurs because the lookup process returns NULL, which leads to an assert() failure in Debug builds (SIGABRT) or a NULL pointer dereference in Release builds (SIGSEGV). A remote unauthenticated attacker can trigger this crash by sending a specially crafted RIC INDICATION message with an arbitrary ran func id value to port 36421.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.