svg
- https://brhfl.com/2017/11/svg-bomb/
- https://www.fortinet.com/blog/threat-research/scalable-vector-graphics-attack-surface-anatomy
jpg
- https://books.google.co.id/books?id=bUNuEAAAQBAJ&pg=PA174&lpg=PA174&dq=imagecreatefromjpeg+vulnerability&source=bl&ots=giBXhHW5-b&sig=ACfU3U3R7ze7yQ5dTxHok1RdBAD6jSsx6Q&hl=id&sa=X&ved=2ahUKEwjJxpbPx6n4AhU1RmwGHRINCVYQ6AF6BAgZEAM#v=onepage&q=imagecreatefromjpeg%20vulnerability&f=false
- https://github.com/dlegs/php-jpeg-injector
gif
how to check file
- strings sxT08M_inf.jpg | grep php
- exiftool