FlexRIC v2.0.0 contains a null pointer dereference triggered when the application receives an E42_RIC_SUBSCRIPTION_REQUEST that references a non‑existent E2 Node. In release builds the NULL pointer is dereferenced, causing a SIGSEGV, while debug builds abort with SIGABRT. The consequence is a denial‑of‑service for the iApp process listening on port 36422, allowing an attacker to force the application to terminate. The vulnerability is based on a missing null check and is classified under CWE‑476. The impact is limited to the affected process but can disrupt service availability as the iApp must restarted manually.

The flaw is present in FlexRIC v2.0.0. No other version or vendor information is available. The impacted component is the iApp listening on port 36422.

The CVSS score is not provided, but the exploit is straightforward: an unauthenticated attacker can craft a subscription request with an arbitrary global_e2_node_id to trigger the crash. Because the attack requires only network connectivity to port 36422 and no authentication, the risk is high. The EPSS score is unavailable, and the vulnerability is not listed in CISA KEV, suggesting no confirmed exploitation yet but the potential for disruption remains.