Ella Core panics on malformed ULNASTransport Message without a Request Type
Ella Core panics when processing malformed UL NAS Transport NAS messages without a Request Type.
Advisories for Golang/Github.com/Ellanetworks/Core package
2026
Ella Core panics on malformed NGAP Location Report
Ella Core panics when processing a malformed NGAP LocationReport message with ue-presence-in-area-of-interest event type and omitting the optional UEPresenceInAreaOfInterestList IE.
Ella Core panics on invalid PDU Session IDs in NGAP messages
Ella Core panics when processing NGAP messages with invalid PDU Session IDs outside of 1-15.
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings
Ella Core panics when processing a PathSwitchRequest containing UE Security Capabilities with zero-length NR encryption or integrity protection algorithm bitstrings, resulting in a denial of service.
Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload
Ella Core panics when processing a malformed integrity protected NGAP/NAS message with a length under 7 bytes.