User blog comment:DaNASCAT/Technical Update: September 9, 2015/@comment-25801460-20150910214518/@comment-26009167-20150911113214

@SlyCooperFan1 Understood, I suppose I worded it wrong. What I meant is that, regardless if the image is actually an image in the end, nothing inside an image will get EXECUTED by a browser. Correct me if I'm wrong, but the security exploit that Wikia had would not have worked unless it was code that was EXECUTED automatically, correct?

Basically, as far as I know, the only thing that happens with an image is that it gets read, decoded and shown to the user as colors on a screen. However I undérstand what you're trying to say.