Crash in cfgrelayex, Analyzed 2 dumps, total processed 69, rate equals 2.90%

Top 1: Version = 2.7224.1000.620, Total count = 1

dump count = 1

ChildEBP RetAddr  
042fe258 77180504 gdi32full!GetFontRealizationInfo+0x15
042fe808 77181066 gdi32full!LoadFont+0x76
042fe82c 771815f0 gdi32full!FindOrCreateFaceCache+0x98
042fe930 77188164 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
042fecd8 77186566 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
042ff144 7718565f gdi32full!ScriptStringAnalyse+0xa16
042ff2dc 77184eb0 gdi32full!LpkCharsetDraw+0x60f
042ff308 757aa6dd gdi32full!LpkDrawTextEx+0x30
042ff364 757aa574 user32!DT_DrawStr+0x5f
042ff3c4 757aa0ab user32!DT_GetLineBreak+0xa2
042ff494 757a9eae user32!DrawTextExWorker+0x1f9
042ff4b0 66fee8ba user32!DrawTextExW+0x1e
042ff514 66fedf54 uxtheme!CTextDraw::GetTextExtent+0xa4
042ff55c 66fe4429 uxtheme!GetThemeTextExtent+0x74
042ff5b0 66ff1167 uxtheme!_GetNcCaptionTextSize+0x61
042ff6a4 66ff2b1c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
042ff750 66ff2bcf uxtheme!_WindowPosChangedWorker+0x7c
042ff75c 66fef735 uxtheme!OnOwpPostWindowPosChanged+0x1f
042ff7ac 757b5203 uxtheme!ThemePostWndProc+0x355
042ff894 757b4dda user32!UserCallWinProcCheckWow+0x363
042ff8f8 757bc267 user32!DispatchClientMessage+0xea
042ff938 7750338d user32!__fnINLPWINDOWPOS+0x37
042ff988 76e8124c ntdll!KiUserCallbackDispatcher+0x4d
042ff98c 6700d7bf win32u!NtUserSetWindowPos+0xc
042ff9b8 66ff02cf uxtheme!OnOwpPreDwmCompositionChanged+0x4f
042ffa14 757b51af uxtheme!ThemePreWndProc+0x43f
042ffafc 757b350a user32!UserCallWinProcCheckWow+0x30f
042ffb70 757b32d0 user32!DispatchMessageWorker+0x22a
042ffb7c 7c01f5a1 user32!DispatchMessageW+0x10
042ffba0 7c01f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
042ffc00 7c02196f CfgRelayEx!CConfigCenterStub::Process+0xa7
042ffc0c 7c03ffcb CfgRelayEx!CThread::ThreadProc+0x1f
042ffc48 76bcf989 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
042ffc58 774f5de4 kernel32!BaseThreadInitThunk+0x19
042ffcb4 774f5db4 ntdll!__RtlUserThreadStart+0x2f
042ffcc4 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 2: Version = v1.7224.1005.626, Total count = 1

dump count = 1

ChildEBP RetAddr  
003cf7cc 0f0ebda0 CfgRelayEx!ValidateLocalCookies+0x1f
003cf804 77c580a9 CfgRelayEx!_except_handler4+0x30
003cf828 77c5807b ntdll!ExecuteHandler2+0x26
003cf84c 77c5801d ntdll!ExecuteHandler+0x24
003cf8d8 77c10133 ntdll!RtlDispatchException+0x127
003cf8d8 0f105240 ntdll!KiUserExceptionDispatcher+0xf
003cfc50 0f0f0e31 CfgRelayEx!ATL::`dynamic atexit destructor for '_AtlBaseModule''+0x806
003cfc84 0f0f0e7f CfgRelayEx!__crt_seh_guarded_call<int>::operator()<<lambda_995298e7d72eb4c2aab26c0585b3abe5>,<lambda_275893d493268fdec8709772e3fcec0e> &,<lambda_293819299cbf9a7022e18b56a874bb5c> >+0x27
003cfca4 0f0f1158 CfgRelayEx!__acrt_lock_and_call<<lambda_275893d493268fdec8709772e3fcec0e> >+0x24
003cfcb8 0f0f0714 CfgRelayEx!_execute_onexit_table+0x17
003cfcf0 0f0f0895 CfgRelayEx!common_exit+0xa1
003cfd00 0f0d92d7 CfgRelayEx!_cexit+0xb
003cfd34 0f0d918f CfgRelayEx!dllmain_crt_process_detach+0x39
003cfd40 0f0d93df CfgRelayEx!dllmain_crt_dispatch+0x4e
003cfd80 0f0d947d CfgRelayEx!dllmain_dispatch+0xaf
003cfd94 77c392c0 CfgRelayEx!_DllMainCRTStartup+0x1c
003cfdb4 77c4f567 ntdll!LdrpCallInitRoutine+0x14
003cfe58 77c4f409 ntdll!LdrShutdownProcess+0x1aa
003cfe6c 76787a7c ntdll!RtlExitUserProcess+0x74
003cfe80 0091275a kernel32!ExitProcessStub+0x12
003cfe8c 009126ef srvhost!exit_or_terminate_process+0x40
003cfec4 00912895 srvhost!common_exit+0xee
003cfed8 00907e90 srvhost!exit+0x11
003cff18 7678347d srvhost!__scrt_common_main_seh+0x179
003cff24 77c39852 kernel32!BaseThreadInitThunk+0xe
003cff64 77c39825 ntdll!__RtlUserThreadStart+0x70
003cff7c 00000000 ntdll!_RtlUserThreadStart+0x1b