FlexRIC v2.0.0 uses hardcoded assertions to validate Information Element (IE) counts in decoded E2AP messages. A remote unauthenticated attacker can send a vali…

FlexRIC v2.0.0 contains a vulnerability where hardcoded assertions are used to validate Information Element counts in E2AP messages instead of proper protocol range validation. A remote unauthenticated attacker can exploit this by sending valid E2AP PDUs with unexpected IE counts, such as E2setupRequest messages with extra optional fields. This causes the application to crash via SIGABRT signal, affecting both near-RT RIC on port 36421 and iApp on port 36422. The vulnerability stems from improper input validation in telecommunications protocol handling.