Attacks where the image isn't actually an image must be the minority, simply because an error would be thrown right away. Attacks most likely focus on vulnerab

Attacks where the image isn't actually an image must be the minority, simply because an error would be thrown right away. Attacks most likely focus on vulnerabilities of image manipulation software: GD, imagemagick, Vips, Gifsicle, etc. It makes sense to use jpegtran.