An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2kugrayala.
{ "affected_functions": [ "PIL.Image.open" ] }