High severity7.5NVD Advisory· Published Jun 1, 2026· Updated Jun 3, 2026

CVE-2026-37231

Description

FlexRIC v2.0.0 uses a uint16_t counter for xapp_id assignment but stores the value in uint32_t message fields. After 65,530+ E42_SETUP_REQUESTs, the 16-bit counter wraps around and produces duplicate xapp_ids. The iApp (port 36422) crashes when attempting to register a duplicate ID in its internal data structure. A remote attacker can trigger this by repeatedly connecting and requesting new xApp registrations.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Minamikotor1/Oran Security Advisories Zhongnan Luoreferences
FlexRIC/FlexRIC2 versions
cpe:2.3:a:mosaic5g:flexric:2.0.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mosaic5g:flexric:2.0.0:*:*:*:*:*:*:*
- (no CPE)range: <=2.0.0

Patches

Vulnerability mechanics

References

github.com/MinamiKotor1/oran-security-advisories-zhongnan-luo/blob/main/advisories/CVE-2026-37231.mdnvdExploitMitigationThird Party Advisory

News mentions

FlexRIC v2.0.0: Ten High-Severity Assertions and Logic Flaws Disclosed
Vypr Intelligence · Jun 1, 2026

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000