An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2kugrayi. This dates to Pillow 2.4.0.
{ "affected_functions": [ "PIL.Image.open" ] }