we will use a hex-editor to inject javascript in the image metadata. This will work because the browsers interpret the code after they render the graphic into HTML.
It is the EXIF processing and that is extra bespoke https://margieegnu287802.wikiinside.com/1072252/the_ultimate_guide_to_jpg_exploit