GitHub Advisoryadvisory · Go

GHSA-6gm8-3g4h-w82m Ella Core Panics Upon NGAP handover failure

MEDIUM Published 2026-04-01 Modified 2026-04-06 Official page ↗
Aliases
CVE-2026-34761
Ecosystem
Go
Packages
github.com/ellanetworks/core
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H
Weaknesses
CWE-476
Reviewed
2026-04-01

Affected packages

• Go github.com/ellanetworks/core: < 1.8.0 → fixed in 1.8.0

Description

Summary Ella Core panics when processing a NGAP handover failure message. Impact If an attacker can force a gNodeB to send NGAP handover failure messages to Ella Core, the process will crash, thereby disrupting service for all connected subscribers. Fix Improve guards in NGAP handover handlers.

Related

Alias · CVE (1)

  • CVE-2026-34761 Ella Core is a 5G core designed for private networks. vulnerability

Weakness · CWE (1)

  • CWE-476 NULL Pointer Dereference weakness

References