This vulnerability in Ericsson Packet Core Controller (PCC) prior to version 1.39 is due to improper handling of syntactically invalid structures (CWE-228). An attacker can exploit this by sending a large volume of specially crafted messages, potentially causing service degradation. The CVSS 4.0 base score is 7.1, indicating high severity, with attack vector adjacent network, low attack complexity, no privileges required, no user interaction, and high impact on availability. No official patch or remediation guidance is currently available, and the product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation can lead to service degradation of the Ericsson Packet Core Controller, impacting availability. There is no indication of confidentiality or integrity impact. No known exploits have been reported in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently documented, monitoring vendor communications for updates is recommended. No specific mitigations are provided by the vendor at this time.