CVE-2026-32320: Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings

March 12, 2026 (updated March 16, 2026)

Ella Core panics when processing a PathSwitchRequest containing UE Security Capabilities with zero-length NR encryption or integrity protection algorithm bitstrings, resulting in a denial of service.

References

github.com/advisories/GHSA-j478-p7vq-3347
github.com/ellanetworks/core
github.com/ellanetworks/core/releases/tag/v1.5.1
github.com/ellanetworks/core/security/advisories/GHSA-j478-p7vq-3347
nvd.nist.gov/vuln/detail/CVE-2026-32320
pkg.go.dev/vuln/GO-2026-4691

Code Behaviors & Features

Detect and mitigate CVE-2026-32320 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →