There exists one heap buffer overflow in TIFFmemcpy in tif unix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file.