CVE-2020-29242

dhowden tag before 2020-11-19 allows «panic: runtime error: index out of range» via readPICFrame.