There was a greatly publicized exploit a number of years ago, which used a bug in a selected, extensively dispersed jpeg library. The web result of the exploit was to allow executing we are steadily updating danger https://www.darkexploits.com/product/extremely-silent-jpg-exploit-new/