| 标题 | Davide Faconti BehaviorTree 4.7.0 / master commit 8d47d39 NULL Pointer Dereference |
|---|
| 描述 | BehaviorTree.CPP version 4.7.0 (master commit 8d47d39) contains a null pointer dereference vulnerability in the XML parser. When parsing XML input, the parser may attempt to construct a filesystem path from a missing attribute, causing a null pointer to be passed into a standard library function. This results in a segmentation fault and application crash. |
|---|
| 来源 | ⚠️ https://github.com/BehaviorTree/BehaviorTree.CPP/issues/1003 |
|---|
| 用户 | sand (UID 90194) |
|---|
| 提交 | 2025-09-14 10時38分 (1 年前) |
|---|
| 管理 | 2025-09-26 08時34分 (12 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 325956 [BehaviorTree 直到 4.7.0 XML Parser /src/xml_parsing.cpp loadDocImpl 拒绝服务] |
|---|
| 积分 | 18 |
|---|