A vulnerability was identified in BehaviorTree up to 4.7... · CVE-2025-11013 · GitHub Advisory Database · GitHub

A vulnerability was identified in BehaviorTree up to 4.7...

Moderate severity Unreviewed Published Sep 26, 2025 to the GitHub Advisory Database • Updated Oct 16, 2025

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

A vulnerability was identified in BehaviorTree up to 4.7.0. This vulnerability affects the function XMLParser::PImpl::loadDocImpl of the file /src/xml_parsing.cpp of the component XML Parser. The manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit is publicly available and might be used.

References

Published by the National Vulnerability Database

Sep 26, 2025

Published to the GitHub Advisory Database Sep 26, 2025

Last updated Oct 16, 2025

Weaknesses

CWE-404

Improper Resource Shutdown or Release

The product does not release or incorrectly releases a resource before it is made available for re-use. Learn more on MITRE.

CWE-476

NULL Pointer Dereference

A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. Learn more on MITRE.