OpenJPEG zero-day flaw leads to remote code execution