Advisories for Golang/Github.com/Ellanetworks/Core package

2026

Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings

Ella Core panics when processing a PathSwitchRequest containing UE Security Capabilities with zero-length NR encryption or integrity protection algorithm bitstrings, resulting in a denial of service.

Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload

Ella Core panics when processing a malformed integrity protected NGAP/NAS message with a length under 7 bytes.