CVE-2025-11012
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
BehaviorTree through version 4.7.0 contains a stack-based buffer overflow in the ParseScript function in /src/script_parser.cpp (Diagnostic Message Handler component) via manipulation of the error_msgs_buffer argument. The attack requires local access and the exploit has been publicly disclosed.
Risk Assessment
A local attacker could exploit the buffer overflow to execute arbitrary code or destabilize the application, potentially leading to process compromise.
Recommendation
Apply patch cb6c7514efa628adb8180b58b4c9ccdebbe096e3 or update the library to a version containing this fix.
Other vulnerabilities in BehaviorTree
See all- CVE-2025-11013Low
In BehaviorTree up to 4.7.0, the XMLParser::PImpl::loadDocImpl function in /src/xml_parsing.cpp (XML Parser component) causes a null pointer dereference. The attack can only be performed locally. The exploit is publicly available and may be used.
- CVE-2025-11011Low
In BehaviorTree up to 4.7.0, the JsonExporter::fromJson function in /src/json_export.cpp causes a null pointer dereference when manipulating the Source argument. The attack requires local access. The exploit is publicly available, and a patch named 4b23dcaf0ce951a31299ebdd61df69f9ce99a76d has been released.
Original NVD description (English source)
A vulnerability was determined in BehaviorTree up to 4.7.0. This affects the function ParseScript of the file /src/script_parser.cpp of the component Diagnostic Message Handler. Executing manipulation of the argument error_msgs_buffer can lead to stack-based buffer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. This patch is called cb6c7514efa628adb8180b58b4c9ccdebbe096e3. A patch should be applied to remediate this issue.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS