VYPR
← All advisories
High severity8.1NVD Advisory· Published Oct 13, 2021· Updated Jun 17, 2026

CVE-2021-3057

CVE-2021-3057

Description

A stack-based buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect app that enables a man-in-the-middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This issue impacts: GlobalProtect app 5.1 versions earlier than GlobalProtect app 5.1.9 on Windows; GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.8 on Windows; GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.8 on the Universal Windows Platform; GlobalProtect app 5.3 versions earlier than GlobalProtect app 5.3.1 on Linux.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Paloaltonetworks/Globalprotectllm-fuzzy7 versions
    (expand)+ 6 more
    • (no CPE)
    • (no CPE)range: 5.2
    • cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:linux:*:*range: >=5.0,<=5.0.8
    • cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:macos:*:*range: >=5.0,<=5.0.9
    • cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:windows:*:*range: >=5.0,<=5.0.10
    • cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:universal_windows_platform:*:*range: >=5.1,<=5.1.1
    • cpe:2.3:a:paloaltonetworks:globalprotect:5.0:*:*:*:*:universal_windows_platform:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.