CVE-2026-32319

Ella Core is a 5G core designed for private networks. Prior to 1.5.1, Ella Core panics when processing a malformed integrity protected NGAP/NAS message with a length under 7 bytes. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected subscribers. No authentication is required. This vulnerability is fixed in 1.5.1.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/ellanetworks/core/security/advisories/GHSA-m9pm-w3gv-c68f	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:ellanetworks:ella_core:*:*:*:*:*:*:*:*

History

17 Jun 2026, 10:35

Type	Values Removed	Values Added
Summary		(es) Ella Core es un núcleo 5G diseñado para redes privadas. Antes de 1.5.1, Ella Core entra en pánico al procesar un mensaje NGAP/NAS malformado y protegido por integridad con una longitud inferior a 7 bytes. Un atacante capaz de enviar mensajes NAS manipulados a Ella Core puede colapsar el proceso, causando una interrupción del servicio para todos los suscriptores conectados. No se requiere autenticación. Esta vulnerabilidad está corregida en 1.5.1.

19 Mar 2026, 13:45

Type	Values Removed	Values Added
CPE		cpe:2.3:a:ellanetworks:ella_core::::::::
First Time		Ellanetworks Ellanetworks ella Core
References	~~() https://github.com/ellanetworks/core/security/advisories/GHSA-m9pm-w3gv-c68f -~~	() https://github.com/ellanetworks/core/security/advisories/GHSA-m9pm-w3gv-c68f - Vendor Advisory

13 Mar 2026, 19:54

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-03-13 19:54

Updated : 2026-06-17 10:35

NVD link : CVE-2026-32319

Mitre link : CVE-2026-32319

CVE.ORG link : CVE-2026-32319

JSON object : View

Products Affected

ellanetworks

ella_core

CWE

CWE-125

Out-of-bounds Read

{"id": "CVE-2026-32319", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-32319", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-14T03:45:45.367242Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "ellanetworks", "product": "core", "versions": [{"status": "affected", "version": "< 1.5.1"}]}]}], "published": "2026-03-13T19:54:42.297", "references": [{"url": "https://github.com/ellanetworks/core/security/advisories/GHSA-m9pm-w3gv-c68f", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-125"}]}], "descriptions": [{"lang": "en", "value": "Ella Core is a 5G core designed for private networks. Prior to 1.5.1, Ella Core panics when processing a malformed integrity protected NGAP/NAS message with a length under 7 bytes. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected subscribers. No authentication is required. This vulnerability is fixed in 1.5.1."}, {"lang": "es", "value": "Ella Core es un n\u00facleo 5G dise\u00f1ado para redes privadas. Antes de 1.5.1, Ella Core entra en p\u00e1nico al procesar un mensaje NGAP/NAS malformado y protegido por integridad con una longitud inferior a 7 bytes. Un atacante capaz de enviar mensajes NAS manipulados a Ella Core puede colapsar el proceso, causando una interrupci\u00f3n del servicio para todos los suscriptores conectados. No se requiere autenticaci\u00f3n. Esta vulnerabilidad est\u00e1 corregida en 1.5.1."}], "lastModified": "2026-06-17T10:35:33.380", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ellanetworks:ella_core:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "187BCA62-CD29-487C-B2AE-AEEA54452188", "versionEndExcluding": "1.5.1"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}