Crash in cfgrelayex, Analyzed 2 dumps, total processed 68, rate equals 2.94%

Top 1: Version = 2.7224.1000.620, Total count = 2

dump count = 1

ChildEBP RetAddr  
047be000 77b8d662 ntdll!RtlpAllocateHeap+0x5
047be090 77b8c65e ntdll!RtlpAllocateHeapInternal+0xff2
047be0ac 763df6d8 ntdll!RtlAllocateHeap+0x3e
047be0cc 763e1da7 ucrtbase!_malloc_base+0x28
047be104 77151f54 ucrtbase!__crt_state_management::wrapped_invoke<void * (__cdecl*)(unsigned int),unsigned int,void *>+0x57
047be110 7715a2e5 gdi32full!operator new+0x1c
047be12c 7715ac21 gdi32full!CFontHead::CFontHead+0x19
047be194 771594bc gdi32full!InsertCFontCache+0x1e
047be208 7714cba0 gdi32full!plfCreateLOCALFONT+0xf2
047be3cc 771b1696 gdi32full!CreateFontIndirectWImpl+0xc0
047be4c8 771b2028 gdi32full!CacheFontLinkingData+0x233
047be4e8 771b23bd gdi32full!IsFontRegLinked+0x28
047bea90 771a802b gdi32full!LoadFont+0x29e
047beab4 771a8182 gdi32full!FindOrCreateFaceCache+0xc7
047bebc0 77146ae5 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x128
047bef68 771474db gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2a5
047bf084 77148873 gdi32full!ScriptStringAnalyse+0x3eb
047bf228 77146733 gdi32full!LpkCharsetDraw+0xa93
047bf268 7723f44b gdi32full!LpkDrawTextEx+0x203
047bf2cc 7723f351 user32!DT_DrawStr+0x69
047bf324 7723ef4e user32!DT_GetLineBreak+0xf8
047bf3f4 772ad03e user32!DrawTextExWorker+0x1c4
047bf410 72e5fb54 user32!DrawTextExW+0x1e
047bf474 72e65b3a uxtheme!CTextDraw::GetTextExtent+0x109
047bf4bc 72e5733d uxtheme!GetThemeTextExtent+0x8a
047bf510 72e2686a uxtheme!_GetNcCaptionTextSize+0x61
047bf68c 72e27bae uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
047bf770 72e2c2ef uxtheme!_WindowPosChangedWorker+0x73
047bf77c 72e290a6 uxtheme!OnOwpPostWindowPosChanged+0x1f
047bf7e0 77234510 uxtheme!ThemePostWndProc+0x356
047bf8dc 77233f6a user32!UserCallWinProcCheckWow+0x4f0
047bf940 77241357 user32!DispatchClientMessage+0xea
047bf980 77bb919d user32!__fnINLPWINDOWPOS+0x37
047bf9d0 76c712ac ntdll!KiUserCallbackDispatcher+0x4d
047bf9d4 72e555bf win32u!NtUserSetWindowPos+0xc
047bfa00 72e2a438 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
047bfa84 772344b8 uxtheme!ThemePreWndProc+0x988
047bfb80 77232da5 user32!UserCallWinProcCheckWow+0x498
047bfbfc 772328f0 user32!DispatchMessageWorker+0x4a5
047bfc08 590ff5a1 user32!DispatchMessageW+0x10
047bfc2c 590ff2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
047bfc8c 5910196f CfgRelayEx!CConfigCenterStub::Process+0xa7
047bfc98 5911ffcb CfgRelayEx!CThread::ThreadProc+0x1f
047bfcd4 75967ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
047bfce4 77bac10b kernel32!BaseThreadInitThunk+0x19
047bfd3c 77bac08f ntdll!__RtlUserThreadStart+0x2b
047bfd4c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
03dbe508 7653295c gdi32full!LoadFont+0x15
03dbe52c 76533453 gdi32full!FindOrCreateFaceCache+0x98
03dbe630 7653ad54 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
03dbe9d8 76539156 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
03dbee44 7653824f gdi32full!ScriptStringAnalyse+0xa16
03dbeff4 76537aa0 gdi32full!LpkCharsetDraw+0x60f
03dbf020 773fd0fd gdi32full!LpkDrawTextEx+0x30
03dbf07c 773fcf94 user32!DT_DrawStr+0x5f
03dbf0dc 773fcacb user32!DT_GetLineBreak+0xa2
03dbf1ac 773fc8ce user32!DrawTextExWorker+0x1f9
03dbf1c8 726be6aa user32!DrawTextExW+0x1e
03dbf22c 726bdd14 uxtheme!CTextDraw::GetTextExtent+0xa4
03dbf274 726b43f9 uxtheme!GetThemeTextExtent+0x74
03dbf2c8 726c0f57 uxtheme!_GetNcCaptionTextSize+0x61
03dbf3b8 726c290c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
03dbf464 726c29bf uxtheme!_WindowPosChangedWorker+0x7c
03dbf470 726bf525 uxtheme!OnOwpPostWindowPosChanged+0x1f
03dbf4c0 77407a83 uxtheme!ThemePostWndProc+0x355
03dbf5ac 7740765a user32!UserCallWinProcCheckWow+0x363
03dbf610 7740f297 user32!DispatchClientMessage+0xea
03dbf650 7760507d user32!__fnINLPWINDOWPOS+0x37
03dbf6a0 726dd6ff ntdll!KiUserCallbackDispatcher+0x4d
03dbf6cc 726c00bf uxtheme!OnOwpPreDwmCompositionChanged+0x4f
03dbf728 77407a2f uxtheme!ThemePreWndProc+0x43f
03dbf814 77406391 user32!UserCallWinProcCheckWow+0x30f
03dbf890 77405eb0 user32!DispatchMessageWorker+0x4d1
03dbf89c 5517f5a1 user32!DispatchMessageW+0x10
03dbf8c0 5517f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
03dbf920 5518196f CfgRelayEx!CConfigCenterStub::Process+0xa7
03dbf92c 5519ffcb CfgRelayEx!CThread::ThreadProc+0x1f
03dbf968 76b4fcc9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
03dbf978 775f7c5e kernel32!BaseThreadInitThunk+0x19
03dbf9d4 775f7c2e ntdll!__RtlUserThreadStart+0x2f
03dbf9e4 00000000 ntdll!_RtlUserThreadStart+0x1b