I visited a client today complaining of their console crashing repeatedly over the weekend.
The console was a CS 20 running 1.1.4.16 firmware 1.1
When working within a cue list, if you copy a cue to the end of the list, then tap the new cue number to renumber it as an existing cue(overwrite)
The cue would remain out of numeric order moving forward. (and it DID seem to delete the cue trying to be overwritten, it just didn't replace it in the stack)
Attempting to edit the improperly ordered cue would trigger a reboot of the console.
