With the latest Steinberg VST3 SDK update (v3.6.7), VST3 plugins that are compiled against this SDK crash in Sonar, which did not crash with VST3 SDK v3.6.6 or earlier. These are VST3 plugins that also use the JUCE framework (v4.3.1).
The root cause seems to be that for plugin parameters that are marked as 'program change' parameters, the following function from the VST SDK is called from Sonar with a parameter ID as first argument instead of the parameter index:
vsteditcontroller.cpp, line 105:
tresult PLUGIN_API EditController::getParameterInfo (int32 paramIndex, ParameterInfo& info)
If the parameter ID (represented as int32) is out of bounds re the parameter array, the VST3 SDK v3.6.7 throws an error (while v3.6.6 did not). Both versions of the SDK however exhibit the problem of calls with the parameter ID argument being mixed up as paramIndex (the SDKs seem to differ in robustness of dealing with this issue).
Using the exact same code, other hosts do call the above function with the correct arguments so this seems a Sonar specific problem. Parameters that are not marked as program change parameters work correctly in Sonar.
The issue occurs for Windows (7) x64, Sonar version 23.2.0 Build 45.