What’s Vulnerable › Vulnerabilities

CVE-2025-11011: BehaviorTree json_export.cpp fromJson null pointer dereference

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-09-26 · updated 2026-10-19
• Weakness: CWE-404

Description

A vulnerability was found in BehaviorTree up to 4.7.0. Affected by this issue is the function JsonExporter::fromJson of the file /src/json_export.cpp. Performing manipulation of the argument Source results in null pointer dereference. The attack needs to be approached locally. The exploit has been made public and could be used. The patch is named 4b23dcaf0ce951a31299ebdd61df69f9ce99a76d. It is suggested to install a patch to address this issue.

Affected products

• BehaviorTree: before 4.7.3 — fixed in 4.7.3

How to fix

Upgrade to a fixed version: BehaviorTree 4.7.3. Check the vendor advisory for mitigations.

References

• https://github.com/BehaviorTree/BehaviorTree.CPP/commit/4b23dcaf0ce951a31299ebdd61df69f9ce99a76d
• https://github.com/BehaviorTree/BehaviorTree.CPP/issues/1008
• https://github.com/BehaviorTree/BehaviorTree.CPP/pull/1009
• https://github.com/user-attachments/files/22270928/poc.zip
• https://vuldb.com/?ctiid.325954
• https://vuldb.com/?id.325954
• https://vuldb.com/?submit.654073

Get alerted when CVE-2025-11011 or the next vulnerability affects your stack