It sounds like they are in a picture library on the top level of your site. Go to View all Site Content on your top level team site, click images and see if they are in there.
If they are, give those users with restricted permissions read access to that library. They'll never really ever see that library or even know it exists, but they must have access to it to view the contents... even when the contents are being viewed on a subsite.