Sure. But this actually happened. I've been twice bitten by using images that claimed to be CC and then an apparent copyright owner appeared and said otherwise. I've never had that happen with open source software.

I think copyright trolling is more prevalent with images, and I think it's generally easier to determine the canonical origin of software. But yes, it's absolutely a risk and a reason why many companies have a legal review process before any new libraries can be used.