CVE-2025-11013
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-09-26

Last updated on: 2026-04-29

Assigner: VulDB

Description
A vulnerability was identified in BehaviorTree up to 4.7.0. This vulnerability affects the function XMLParser::PImpl::loadDocImpl of the file /src/xml_parsing.cpp of the component XML Parser. The manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit is publicly available and might be used.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-09-26
Last Modified
2026-04-29
Generated
2026-05-07
AI Q&A
2025-09-26
EPSS Evaluated
2026-05-05
NVD
CVE-2025-11013
EUVD
EUVD-2025-31340
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
behaviortree behaviortree to 4.7.0 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-404 The product does not release or incorrectly releases a resource before it is made available for re-use.
CWE-476 The product dereferences a pointer that it expects to be valid but is NULL.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability exists in BehaviorTree up to version 4.7.0, specifically in the XMLParser::PImpl::loadDocImpl function within the XML Parser component. It allows an attacker with local access to cause a null pointer dereference, which can lead to a denial of service or crash of the application. The exploit is publicly available.


How can this vulnerability impact me? :

The vulnerability can cause the affected application to crash or become unavailable due to a null pointer dereference. Since the attack requires local access, it may impact users or systems where an attacker can execute code locally, potentially leading to denial of service conditions.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart