ellanetworks/core · Security
Ella Core Panics Upon NGAP handover failure
- GHSA ID
- GHSA-6gm8-3g4h-w82m
- CVE ID
- CVE-2026-34761
- Severity
- medium
- Published
- Updated
- CVSS
- 5.8 · CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H
- CVSS v3
- 5.8 · CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H
Description
Summary
Ella Core panics when processing a NGAP handover failure message.
Impact
If an attacker can force a gNodeB to send NGAP handover failure messages to Ella Core, the process will crash, thereby disrupting service for all connected subscribers.
Fix
Improve guards in NGAP handover handlers.
CWEs
- CWE-476 · NULL Pointer Dereference