Surprised no one has mentioned the Therac-25 debacle: https://en.wikipedia.org/wiki/Therac-25

This is a lesson we've learned many times over by now: Software limits alone are insufficient.