CVE-2025-11011 in BehaviorTree
Summary
by MITRE • 09/26/2025
A vulnerability was found in BehaviorTree up to 4.7.0. Affected by this issue is the function JsonExporter::fromJson of the file /src/json_export.cpp. Performing manipulation of the argument Source results in null pointer dereference. The attack needs to be approached locally. The exploit has been made public and could be used. The patch is named 4b23dcaf0ce951a31299ebdd61df69f9ce99a76d. It is suggested to install a patch to address this issue.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Analysis
by VulDB Data Team • 10/16/2025
The vulnerability identified as CVE-2025-11011 represents a critical null pointer dereference flaw within the BehaviorTree library version 4.7.0 and earlier. This issue specifically affects the JsonExporter::fromJson function located in the /src/json_export.cpp file, which serves as a core component for handling JSON data serialization and deserialization within the framework. The vulnerability arises from insufficient input validation and error handling when processing malformed or manipulated source arguments, creating a scenario where the application attempts to dereference a null pointer during execution.
The technical exploitation of this vulnerability requires local access to the system running the affected BehaviorTree library, as the attack vector involves direct manipulation of input parameters rather than network-based attacks. This local privilege requirement reduces the attack surface but does not eliminate the severity of the issue, particularly in environments where untrusted users might have access to the system. The null pointer dereference occurs when the function processes a source argument that has been crafted to trigger unexpected behavior in the pointer validation logic, potentially leading to application crashes or, in more sophisticated scenarios, arbitrary code execution depending on the system's memory layout and security mitigations.
The operational impact of this vulnerability extends beyond simple application instability, as it could enable attackers to disrupt services or potentially escalate privileges within the system. When the JsonExporter::fromJson function encounters malformed input, the resulting null pointer dereference can cause the entire application to terminate abruptly, leading to denial of service conditions that may affect critical business processes relying on BehaviorTree functionality. The public availability of exploitation techniques further amplifies the risk, as malicious actors can readily develop and deploy attacks without requiring specialized knowledge or tools.
Security professionals should immediately implement the patch referenced as 4b23dcaf0ce951a31299ebdd61df69f9ce99a76d to address this vulnerability. This patch specifically targets the input validation logic within the JsonExporter::fromJson function, ensuring proper handling of edge cases and malformed inputs that previously led to null pointer dereference conditions. Organizations should conduct comprehensive testing of the patched version to verify that the fix does not introduce regressions in existing functionality while also implementing monitoring to detect any attempts to exploit this vulnerability. The vulnerability aligns with CWE-476, which describes null pointer dereference conditions, and represents a significant concern for systems utilizing BehaviorTree libraries in mission-critical applications where service availability and system integrity are paramount.