It's extremely unlikely. The chances of finding a RCE exploit that can be triggered without any Javascript are much lower.

It's not unheard of, of course. A bug in the CSS, HTML, or image parsing/rendering libraries can be exploited in this way.