An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_gray_i.
Published June 2, 2021.
Fedoraproject Fedora
Python Pillow