Mumble before 1.6.870 is prone to an out-of-bounds array access, which may result in denial of service (client crash).