Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FlexRIC v2.0.0 uses a uint16_t counter for xapp_id assignment but stores the value in uint32_t message fields. After 65,530+ E42_SETUP_REQUESTs, the 16-bit counter wraps around and produces duplicate xapp_ids. The iApp (port 36422) crashes when attempting to register a duplicate ID in its internal data structure. A remote attacker can trigger this by repeatedly connecting and requesting new xApp registrations.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
🚨 HIGH: CVE-2026-37231 (CVSS 7.5) - FlexRIC v2.0.0 integer overflow causes iApp crash after 65,530+ xApp registrations. Remote attacker can trigger duplicate xapp_id DoS. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/ZipXPO9YPH
Post summary
The tweet announces CVE-2026-37231, an integer overflow in FlexRIC v2.0.0 that can cause a DoS after many xApp registrations, and urges users to patch immediately.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mosaic5g | flexric | 2.0.0 | - | - |