Andamiro Pump It Up 20th Anniversary (aka Double X or XX/2019) 1.00.0-2.08.3 allows a physically proximate attacker to cause a denial of service (application crash) via certain deselect actions.
https://xx.piugame.com/bbs/board.php?bo_table=global_notice&wr_id=368