ncmpc through 0.29 is prone to a NULL pointer dereference flaw. If a user uses the chat screen and another client sends a long chat message, a crash and denial of service could occur.
https://usn.ubuntu.com/4507-1/
https://lists.debian.org/debian-lts-announce/2020/04/msg00020.html