CGBA: Curvature-aware Geometric Black-box Attack