In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing certain strings.
{ "urgency": "not yet assigned" }