CVE-2025-48379 Pillow Vulnerable to Write Buffer Overflow on BCn encoding

🗓️ 01 Jul 2025 18:33:30Reported by GitHub_MType

Pillow versions 11.2.0 to 11.3.0 are vulnerable to buffer overflow in BCn encoding. Patch available.

Reporter	Title	Published	Views	Family All 52
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion	11 Sep 202518:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security vulnerabilities affecting IBM Knowledge Catalog Premium Cartridge	7 Apr 202620:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM watsonx Code Assistant On Prem	28 Aug 202507:22	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	30 Jul 202517:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM watsonx Code Assistant On Prem	28 Aug 202507:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for Aug 2025	29 Aug 202510:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Predict Component uses Pillow is a Python imaging library format due to writing into a buffer.	7 Oct 202516:23	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in pillow affects IBM watsonx Orchestrate with watsonx Assistant Cartridge	11 Sep 202506:20	–	ibm
Chainguard	CVE-2025-48379 vulnerabilities	2 Jul 202519:16	–	cgr

[
  {
    "vendor": "python-pillow",
    "product": "Pillow",
    "versions": [
      {
        "version": ">= 11.2.0, < 11.3.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/python-pillow/Pillow/releases/tag/11.3.0
github	www.github.com/python-pillow/Pillow/security/advisories/GHSA-xg8h-j46f-w952
github	www.github.com/python-pillow/Pillow/commit/ef98b3510e3e4f14b547762764813d7e5ca3c5a4
github	www.github.com/python-pillow/Pillow/pull/9041

01 Jul 2025 18:33Current

CVSS 3.17.1

EPSS0.00261

CWE-122