What is the CVSS score of CVE-2026-32319?

CVE-2026-32319 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.1%.

Which versions of Suse are affected by CVE-2026-32319?

A high-severity vulnerability in Ella Networks Core can cause service crashes when processing specially crafted network messages, potentially disrupting telecommunications infrastructure and call…. A patch is available.

How to fix or mitigate CVE-2026-32319?

Within 24 hours: Inventory all Ella Networks Core deployments and determine exposure scope; establish incident response procedures. Within 7 days: Implement network segmentation to restrict NGAP/NAS traffic sources; monitor system logs for crash signatures and malformed message attempts. Within 30 days: Engage Ella Networks for security guidance; evaluate alternative vendors if patch timeline is unacceptable; develop automated monitoring and alerting for crash events.

Suse CVE-2026-32319

HIGH

Out-of-bounds Read (CWE-125)

2026-03-12 https://github.com/ellanetworks/core

GHSA-m9pm-w3gv-c68f

Information Disclosure Buffer Overflow Suse

7.5

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SUSE

HIGH

qualitative

Primary rating from GitHub Advisory.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 13, 2026 - 08:35 vuln.today

CVE Published

Mar 12, 2026 - 20:33 nvd

HIGH 7.5

DescriptionGitHub Advisory

Summary

Ella Core panics when processing a malformed integrity protected NGAP/NAS message with a length under 7 bytes.

Impact

An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected subscribers. No authentication is required.

Fix

Added length verification to NAS message handling.

AnalysisAI

High severity vulnerability in Ella Networks Core. Ella Core panics when processing a malformed integrity protected NGAP/NAS message with a length under 7 bytes.

Technical ContextAI

Vulnerability Type: Out-of-bounds Read (CWE-125) CVSS 3.1: 7.5/10.0 — Attack Vector: Network | Complexity: Low | Privileges Required: None | User Interaction: None Attack Techniques: Information Disclosure, Buffer Overflow Source: https://github.com/ellanetworks/core