This advisory covers two vulnerabilities affecting Red Hat Enterprise Linux AI 1.5 (AMD). CVE-2025-48379 is a heap-based buffer overflow in the Pillow library caused by insufficient size checking when writing DDS image data into an internal buffer, allowing a local attacker to execute arbitrary code or cause denial of service. CVE-2025-47277 is also referenced but specific technical details are not provided in the input data. Red Hat has not released a patch or official fix for these issues as of the advisory date. The vulnerabilities impact the integrity and availability of applications using the affected Pillow library within Red Hat Enterprise Linux AI 1.5.

Successful exploitation of CVE-2025-48379 can lead to local arbitrary code execution with the privileges of the user running the affected application or cause application crashes resulting in denial of service. The impact includes potential compromise of system integrity and availability. CVE-2025-47277 impact details are not explicitly described in the provided data. No known exploits are reported in the wild at this time.

No official fix or patch is currently available for these vulnerabilities in Red Hat Enterprise Linux AI 1.5. Red Hat advises affected users to monitor the vendor advisory for updates and consider consulting Red Hat support or a Technical Account Manager for possible mitigation strategies. No vendor-provided mitigations meeting criteria for ease of use and deployment are currently available.