Ella Core, a 5G core system for private networks, contains a bug that causes the application to panic when it processes a specially crafted NGAP LocationReport message. The vulnerability is a NULL pointer dereference (CWE‑476) that terminates the core process, thereby interrupting all services for connected subscribers. The crash results in a service disruption without providing any means of remote code execution or data exfiltration.

All releases of Ella Networks Core older than version 1.7.0 are affected. The problem resides in the core product shipped by Ella Networks and is specific to the NGAP LocationReport handler in these firmware versions.

The CVSS score of 6.5 indicates moderate severity. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog. The attack requires the ability to send crafted NGAP messages to the core, which typically means access to the network interface handling NGAP traffic. An attacker with network connectivity to the core or a compromised internal node could exploit this flaw, causing a denial of service for all subscribers.