CVE-2026-37228

FlexRIC v2.0.0 contains a security vulnerability in the e2ap_recv_sctp_msg() function located in src/lib/ep/e2ap_ep.c. The software allocates a fixed 32KB receive buffer but fails to properly validate the return value of sctp_recvmsg() , enforcing a reachable assertion instead. A remote unauthent...