FlexRIC version 2.0.0 contains a reachable assertion in the e2ap_create_pdu() routine that is triggered when the ASN.1 PER decoder fails to parse incoming data. The assertion is reached before any protocol‑level validation, causing the process to abort with SIGABRT. An unauthenticated attacker can supply an arbitrary non‑PER byte sequence over SCTP to the near‑RT RIC (port 36421) or the iApp (port 36422), which results in a crash of the affected service. The vulnerability represents a denial of service that can be exploited remotely without authentication, potentially disrupting the operation of near‑RT RIC infrastructure and related services.

The flaw affects FlexRIC v2.0.0, with all supported E2AP protocol versions (v1.01, v2.03, v3.01) impacted. The vulnerable points are the SCTP listeners on ports 36421 (near‑RT RIC) and 36422 (iApp). No specific vendor or product naming beyond FlexRIC is provided.

The flaw is exploitable by an unauthenticated attacker who can send any crafted byte sequence over SCTP to the exposed ports. The EPSS score is present but less than 1%, indicating a very low exploitation probability, and the flaw is not listed in KEV, but the immediate availability of the crash vector makes the risk high from an availability perspective. The CVSS score is 7.5, indicating a high severity vulnerability.