Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c.
{ "urgency": "not yet assigned" }