A malicious server could cause irssi to crash by providing an invalid timestamp (CVE-2017-10965).
Undefined behavior may be triggered when irssi updates the internal nick list (CVE-2017-10966).