EUVD-2026-33699

FlexRIC v2.0.0 crashes when the iApp receives an E42RICSUBSCRIPTIONREQUEST with an empty ricEventTriggerDefinition field. The E42 layer decoder accepts this as valid, but the E2AP encoder asserts a non-empty constraint when forwarding the request. A remote unauthenticated attacker can crash the...

PT-2026-45455

FlexRIC v2.0.0 crashes when the iApp receives an E42 RIC SUBSCRIPTION REQUEST with an empty ricEventTriggerDefinition field. The E42 layer decoder accepts this as valid, but the E2AP encoder asserts a non-empty constraint when forwarding the request. A remote unauthenticated attacker can crash th...

CVE-2026-37225

FlexRIC v2.0.0 is vulnerable to a denial-of-service (DoS) condition due to a cross-layer validation mismatch. The E42 layer decoder incorrectly accepts an E42_RIC_SUBSCRIPTION_REQUEST containing an empty ricEventTriggerDefinition field as valid. However, the E2AP encoder asserts a non-empty const...