CVE-2025-11013
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
In BehaviorTree up to 4.7.0, the XMLParser::PImpl::loadDocImpl function in /src/xml_parsing.cpp (XML Parser component) causes a null pointer dereference. The attack can only be performed locally. The exploit is publicly available and may be used.
Risk Assessment
A local attacker could cause an application crash via a crafted XML file. This may lead to denial of service or system instability.
Recommendation
Update BehaviorTree to a version later than 4.7.0 if available, or apply a fix. Avoid processing untrusted XML files.
Other vulnerabilities in BehaviorTree
See all- CVE-2025-11012Medium
BehaviorTree through version 4.7.0 contains a stack-based buffer overflow in the ParseScript function in /src/script_parser.cpp (Diagnostic Message Handler component) via manipulation of the error_msgs_buffer argument. The attack requires local access and the exploit has been publicly disclosed.
- CVE-2025-11011Low
In BehaviorTree up to 4.7.0, the JsonExporter::fromJson function in /src/json_export.cpp causes a null pointer dereference when manipulating the Source argument. The attack requires local access. The exploit is publicly available, and a patch named 4b23dcaf0ce951a31299ebdd61df69f9ce99a76d has been released.
Original NVD description (English source)
A vulnerability was identified in BehaviorTree up to 4.7.0. This vulnerability affects the function XMLParser::PImpl::loadDocImpl of the file /src/xml_parsing.cpp of the component XML Parser. The manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit is publicly available and might be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS