Description
A vulnerability was determined in BehaviorTree up to 4.7.0. This affects the function ParseScript of the file /src/script_parser.cpp of the component Diagnostic Message Handler. Executing manipulation of the argument error_msgs_buffer can lead to stack-based buffer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. This patch is called cb6c7514efa628adb8180b58b4c9ccdebbe096e3. A patch should be applied to remediate this issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | BehaviorTree | 4.0, 4.1, 4.2, 4.3, 4.4, 4.5, 4.6, 4.7.0 | — |
References
- VDB-325955 | BehaviorTree Diagnostic Message script_parser.cpp ParseScript stack-based overflow vdb-entry technical-description
- VDB-325955 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #654074 | Davide Faconti BehaviorTree 4.7.0 / master commit 8d47d39 Stack-based Buffer Overflow third-party-advisory
- https://github.com/BehaviorTree/BehaviorTree.CPP/issues/1006 issue-tracking
- https://github.com/BehaviorTree/BehaviorTree.CPP/pull/1007 issue-tracking
- https://github.com/user-attachments/files/22251337/poc.zip exploit
- https://github.com/BehaviorTree/BehaviorTree.CPP/commit/cb6c7514efa628adb8180b58b4c9ccdebbe096e3 patch