An issue was discovered in Pillow before 8.1.1. There is an out-of-bounds read in SGIRleDecode.c.
"https://github.com/pypa/advisory-database/blob/main/vulns/pillow/PYSEC-2021-39.yaml"