CVE-2025-48379 | python-pillow Pillow up to 11.2.x heap-based overflow

SecurityVulns

A vulnerability classified as critical has been found in python-pillow Pillow up to 11.2.x. This affects an unknown part. The manipulation leads to heap-based buffer overflow.

This vulnerability is uniquely identified as CVE-2025-48379. Local access is required to approach this attack. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More