| [[CSND_Services|CSND]] sysmodule crash due to out of bounds parameters.
+
| The CSND command [[CSND:PlaySoundDirectly|PlaySoundDirectly (0x00040080)]] takes a channel ID as the first parameter. Any value outside the range [0-3] makes the system module become unstable or crash due to an out of bounds memory read.
+
| Out of bounds memory read, probably not exploitable. More research needed.