An issue exists in Pillow prior to 8.1.1. There is an out-of-bounds read in SGIRleDecode.c.
python pillow