Buffer overflow in Irrlicht before 1.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors in the B3D loader.
https://exchange.xforce.ibmcloud.com/vulnerabilities/47453
http://www.securityfocus.com/bid/32907