FlexRIC v2.0.0 contains a vulnerability where the near-RT RIC crashes when receiving a RIC_SUBSCRIPTION_RESPONSE with an unknown ric_id that has no corresponding pending event. The system uses assert() to enforce pending event existence during response processing. Remote unauthenticated attackers can exploit this by sending forged RIC_SUBSCRIPTION_RESPONSE messages to port 36421, causing SIGABRT in Debug builds or NULL pointer dereference (SIGSEGV) in Release builds. This represents a denial of service vulnerability in telecommunications infrastructure.