This advisory covers two vulnerabilities affecting Red Hat Enterprise Linux AI 1.5 (NVIDIA). CVE-2025-48379 is a heap-based buffer overflow in the Pillow library caused by insufficient size checking when processing DDS image files larger than 64k, potentially leading to local arbitrary code execution or denial of service. CVE-2025-47277 is also referenced but detailed technical information is not provided in the input. Red Hat has not issued patches for these vulnerabilities as of the advisory date. The affected product is a container platform enabling NVIDIA hardware for Granite family large language models. The advisory states no fixes are currently available and mitigation options do not meet Red Hat's criteria for deployment.

Successful exploitation of CVE-2025-48379 can lead to local arbitrary code execution with the privileges of the user running the vulnerable application or cause application crashes resulting in denial of service. The impact of CVE-2025-47277 is not detailed in the provided data. There are no known exploits in the wild. The vulnerabilities affect the integrity and availability of the affected system components.

Red Hat has not provided a fix for these vulnerabilities yet. According to the vendor advisory, mitigation options are either unavailable or do not meet Red Hat's criteria for ease of use, deployment, or stability. Users should monitor Red Hat's official advisories for updates and consider contacting Red Hat support or their Technical Account Manager for guidance. No specific mitigations are recommended by Red Hat at this time.