This advisory covers two vulnerabilities affecting Red Hat Enterprise Linux AI 1.5 (AMD). CVE-2025-48379 is a heap-based buffer overflow in the Pillow library caused by insufficient size checking when processing DDS image files larger than 64k, potentially allowing local attackers to execute arbitrary code or cause application crashes (denial of service). CVE-2025-47277 is also referenced but without detailed technical information in the provided data. Red Hat has not released patches or mitigations for these vulnerabilities yet. The affected product is Red Hat Enterprise Linux AI 1.5 on amd64. The advisory emphasizes the high severity of these issues and notes that mitigation options are currently unavailable or insufficient.

Successful exploitation of CVE-2025-48379 can lead to local arbitrary code execution with the privileges of the user running the affected application or cause denial of service by crashing the application. The impact includes potential compromise of integrity and availability of the affected system. CVE-2025-47277 impact details are not explicitly provided in the input data. The vulnerabilities affect enterprise AI platform deployments using Red Hat Enterprise Linux AI 1.5 on amd64.

According to the Red Hat advisory, no patches or fixes are currently available for these vulnerabilities. Mitigations that meet Red Hat's criteria for ease of use, applicability, and stability are not available at this time. Users should monitor Red Hat's official advisories for updates and consider restricting local access to trusted users only until fixes are released. Customers with Red Hat Technical Account Managers (TAM) can consult them for further guidance.