CVE-2026-32320: Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings

March 12, 2026 (updated March 16, 2026)

Ella Core panics when processing a PathSwitchRequest containing UE Security Capabilities with zero-length NR encryption or integrity protection algorithm bitstrings, resulting in a denial of service.

References

github.com/advisories/GHSA-j478-p7vq-3347
github.com/ellanetworks/core
github.com/ellanetworks/core/releases/tag/v1.5.1
github.com/ellanetworks/core/security/advisories/GHSA-j478-p7vq-3347
nvd.nist.gov/vuln/detail/CVE-2026-32320
pkg.go.dev/vuln/GO-2026-4691

Code Behaviors & Features

Detect and mitigate CVE-2026-32320 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →