| [[NWM_Services|NWM]] service-cmd state null-ptr deref
+
| The NWMUDS service command code loads a ptr from .data, adds an offset to that, then passes that as the state address for the actual command-handler function. The value of the ptr loaded from .data is not checked, therefore this will cause crashes due to that being 0x0 when NWMUDS was not properly initialized.
+
It's unknown whether any NWM services besides NWMUDS have this issue.
+
| This is rather useless since it's only a crash caused by a state ptr based at 0x0.