PT-2026-25088 · Ella Core · Ella Core

P1-Aji

·

Publicado

2026-03-12

·

Atualizado

2026-03-25

·

CVE-2026-32320

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Ella Core versions prior to 1.5.1
Description Ella Core is a 5G core designed for private networks. The software experiences a panic, leading to a denial of service, when processing a PathSwitchRequest containing UE Security Capabilities with zero-length NR encryption or integrity protection algorithm bitstrings. An attacker capable of sending crafted NGAP messages to Ella Core can disrupt service for all connected subscribers. No authentication is required for exploitation. The issue stems from a lack of length validation on NR algorithm bitstrings before they are accessed within the PathSwitchRequest handler.
Recommendations Versions prior to 1.5.1 should be updated to version 1.5.1 or later.

Exploit

Correção

DoS

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2026-32320
GHSA-J478-P7VQ-3347
GO-2026-4691
SUSE-SU-2026:1042-1

Produtos afetados

Ella Core