An issue was discovered in Pillow before 8.1.1. There is an out-of-bounds read in SGIRleDecode.c.
{ "severity": "High", "cpes": [ "cpe:2.3:a:python:pillow:*:*:*:*:*:*:*:*" ] }