Attackers Could Exploit AI Vision Models Using Imperceptible Image Changes