What is CVE-2026-32319?

CVE-2026-32319 is a high-severity vulnerability in Ellanetworks Core, classified under Out-of-bounds Read. CVSS score: 7.5/10. Published 2026-03-13.

How severe is CVE-2026-32319?

High severity. CVSS v3 base score is 7.5 out of 10.

Out-of-bounds Read in Ellanetworks Core

CVE-2026-32319

Ella Core is a 5G core designed for private networks. Prior to 1.5.1, Ella Core panics when processing a malformed integrity protected NGAP/NAS message with a length under 7 bytes. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected subscribers. No authentication is required. This vulnerability is fixed in 1.5.1.

Vulnerability class: Buffer Overflow

EPSS: 0.003 (22.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Ellanetworks Core — versions < 1.5.1
Ellanetworks Ella_core

Weakness classification (CWE)

CWE-125 — Out-of-bounds Read

References

security-advisories@github.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2026-32319?: CVE-2026-32319 is a high-severity vulnerability in Ellanetworks Core, classified under Out-of-bounds Read. CVSS score: 7.5/10. Published 2026-03-13.
How severe is CVE-2026-32319?: High severity. CVSS v3 base score is 7.5 out of 10.