Ella Core’s NGAP handover failure handling contains a null pointer dereference that causes the application to panic. Exploitation allows an attacker who can induce a gNodeB to send NGAP handover failure messages to cause a crash, denying all connected subscribers access to network services.

Affected vendor is Ella Networks; product is Ella Core. All versions prior to 1.8.0 are vulnerable. The issue was fixed in release 1.8.0 and later.

The CVSS score of 5.8 indicates moderate severity. The EPSS score is below 1%, suggesting a low likelihood of exploitation. The flaw is not listed in CISA’s KEV catalog. Attackers would need the ability to influence gNodeB behavior to send NGAP handover failure messages, with no official workaround available other than patching.