CVE-2025-48379
published 2025-07-01CVE-2025-48379: Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a sufficiently large (>64k encoded with…
PriorityP426medium5.5CVSS 3.1
AVLACLPRLUINSUCNIHAN
EPSS
0.27%
18.7th percentile
Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a sufficiently large (>64k encoded with default settings) image in the DDS format due to writing into a buffer without checking for available space. This only affects users who save untrusted data as a compressed DDS image. This issue has been patched in version 11.3.0.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | pillow | — | — |
| python-pillow | pillow | — | — |
| python | pillow | < ef98b3510e3e4f14b547762764813d7e5ca3c5a4 | ef98b3510e3e4f14b547762764813d7e5ca3c5a4 |
| python | pillow | — | — |
| python | pillow | >= 0 < 89f1f4626a2aaf5f3d5ca6437f41def2998fbe09 | 89f1f4626a2aaf5f3d5ca6437f41def2998fbe09 |
| python | pillow | >= 11.2.0 < 11.3.0 | 11.3.0 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
vendor_debian7.1LOW
vendor_redhat7.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Pillow vulnerability can cause write buffer overflow on BCn encoding
ghsa·2025-07-01
CVE-2025-48379 [HIGH] CWE-122 Pillow vulnerability can cause write buffer overflow on BCn encoding
Pillow vulnerability can cause write buffer overflow on BCn encoding
There is a heap buffer overflow when writing a sufficiently large (>64k encoded with default settings) image in the DDS format due to writing into a buffer without checking for available space.
This only affects users who save untrusted data as a compressed DDS image.
* Unclear how large the potential write could be. It is likely limited by process segfault, so it's not necessarily deterministic. It may be practically unbounded.
* Unclear if there's a restriction on the bytes that could be emitted. It's likely that the only restriction is that the bytes would be emitted in chunks of 8 or 16.
This was introduced in Pillow 11.2.0 when the feature was added.
OSV
Pillow vulnerability can cause write buffer overflow on BCn encoding
osv·2025-07-01
CVE-2025-48379 [HIGH] Pillow vulnerability can cause write buffer overflow on BCn encoding
Pillow vulnerability can cause write buffer overflow on BCn encoding
There is a heap buffer overflow when writing a sufficiently large (>64k encoded with default settings) image in the DDS format due to writing into a buffer without checking for available space.
This only affects users who save untrusted data as a compressed DDS image.
* Unclear how large the potential write could be. It is likely limited by process segfault, so it's not necessarily deterministic. It may be practically unbounded.
* Unclear if there's a restriction on the bytes that could be emitted. It's likely that the only restriction is that the bytes would be emitted in chunks of 8 or 16.
This was introduced in Pillow 11.2.0 when the feature was added.
OSV
CVE-2025-48379: Pillow is a Python imaging library
osv·2025-07-01
CVE-2025-48379 CVE-2025-48379: Pillow is a Python imaging library
Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a sufficiently large (>64k encoded with default settings) image in the DDS format due to writing into a buffer without checking for available space. This only affects users who save untrusted data as a compressed DDS image. This issue has been patched in version 11.3.0.
Red Hat
python-pillow: pillow: Pillow DDS Heap Buffer Overflow
vendor_redhat·2025-07-01·CVSS 7.1
CVE-2025-48379 [HIGH] CWE-122 python-pillow: pillow: Pillow DDS Heap Buffer Overflow
python-pillow: pillow: Pillow DDS Heap Buffer Overflow
Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a sufficiently large (>64k encoded with default settings) image in the DDS format due to writing into a buffer without checking for available space. This only affects users who save untrusted data as a compressed DDS image. This issue has been patched in version 11.3.0.
A critical vulnerability was identified in the Pillow image processing library. This flaw could allow a local attacker to execute arbitrary code or cause the application to crash, resulting in a denial of service. An attacker can exploit this vulnerability by tricking an application into processing a specially crafted image file. The issue occurs becau
Debian
CVE-2025-48379: pillow - Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there i...
vendor_debian·2025·CVSS 7.1
CVE-2025-48379 [HIGH] CVE-2025-48379: pillow - Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there i...
Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a sufficiently large (>64k encoded with default settings) image in the DDS format due to writing into a buffer without checking for available space. This only affects users who save untrusted data as a compressed DDS image. This issue has been patched in version 11.3.0.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
No detection rules found.
No public exploits indexed.
2025-07-01
Published