CVE-2025-11011
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
In BehaviorTree up to 4.7.0, the JsonExporter::fromJson function in /src/json_export.cpp causes a null pointer dereference when manipulating the Source argument. The attack requires local access. The exploit is publicly available, and a patch named 4b23dcaf0ce951a31299ebdd61df69f9ce99a76d has been released.
Risk Assessment
A local attacker could cause an application crash via crafted JSON input. This may lead to denial of service.
Recommendation
Install patch 4b23dcaf0ce951a31299ebdd61df69f9ce99a76d or update to a version containing this fix. Avoid processing untrusted JSON data.
Other vulnerabilities in BehaviorTree
See all- CVE-2025-11013Low
In BehaviorTree up to 4.7.0, the XMLParser::PImpl::loadDocImpl function in /src/xml_parsing.cpp (XML Parser component) causes a null pointer dereference. The attack can only be performed locally. The exploit is publicly available and may be used.
- CVE-2025-11012Medium
BehaviorTree through version 4.7.0 contains a stack-based buffer overflow in the ParseScript function in /src/script_parser.cpp (Diagnostic Message Handler component) via manipulation of the error_msgs_buffer argument. The attack requires local access and the exploit has been publicly disclosed.
Original NVD description (English source)
A vulnerability was found in BehaviorTree up to 4.7.0. Affected by this issue is the function JsonExporter::fromJson of the file /src/json_export.cpp. Performing manipulation of the argument Source results in null pointer dereference. The attack needs to be approached locally. The exploit has been made public and could be used. The patch is named 4b23dcaf0ce951a31299ebdd61df69f9ce99a76d. It is suggested to install a patch to address this issue.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS