"Jack-in-the-Box" Vulnerability When Unpacking Images