BehaviorTree vulnerabilities

In BehaviorTree up to 4.7.0, the XMLParser::PImpl::loadDocImpl function in /src/xml_parsing.cpp (XML Parser component) causes a null pointer dereference. The attack can only be performed locally. The exploit is publicly available and may be used.

BehaviorTree through version 4.7.0 contains a stack-based buffer overflow in the ParseScript function in /src/script_parser.cpp (Diagnostic Message Handler component) via manipulation of the error_msgs_buffer argument. The attack requires local access and the exploit has been publicly disclosed.

In BehaviorTree up to 4.7.0, the JsonExporter::fromJson function in /src/json_export.cpp causes a null pointer dereference when manipulating the Source argument. The attack requires local access. The exploit is publicly available, and a patch named 4b23dcaf0ce951a31299ebdd61df69f9ce99a76d has been released.