This vulnerability (CWE-787) involves an out-of-bounds write (buffer overflow) in the Palo Alto Networks GlobalProtect app on affected versions 6.2.0 and 6.3.0. It is triggered during the handling of requests and responses exchanged between the Portal and Gateway components. Successful exploitation could allow a man-in-the-middle attacker to disrupt system processes or execute arbitrary code with SYSTEM privileges. The iOS version of the app is not affected. The CVSS 4.0 vector indicates the attack requires adjacent network access, no privileges, and no user interaction, with high impact on confidentiality, integrity, and availability. No patch or official remediation level has been published by the vendor as of the data provided.

An attacker positioned to intercept and manipulate communications between the Portal and Gateway can exploit this buffer overflow to disrupt system processes or execute arbitrary code with SYSTEM-level privileges on affected GlobalProtect app versions. This could lead to system compromise or denial of service. The iOS app is not vulnerable. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the Palo Alto Networks vendor advisory for current remediation guidance. Until an official fix is released, organizations should consider minimizing exposure to man-in-the-middle attacks on the network segment where GlobalProtect communications occur. No vendor-provided temporary fixes or mitigations are currently documented.