Arbitrary remote code execution in New Super Mario Bros. 2, delivered from another console in the same local wireless game.
Two array indices are taken straight off the wire from the other player, never bounds-checked, resulting in an arbitrary write.