Crash in cfgrelayex, Analyzed 2 dumps, total processed 175, rate equals 1.14%

Top 1: Version = 2.7224.1000.620, Total count = 2

dump count = 1

ChildEBP RetAddr  
0048f94c 77a4e0c3 ntdll!RtlpLowFragHeapFree+0xc5
0048f964 755b14ad ntdll!RtlFreeHeap+0x105
0048f978 6cfb2d01 kernel32!HeapFree+0x14
0048f98c 6cfbaf97 CfgRelayEx!_free_base+0x1c
0048f99c 6cfb8b0d CfgRelayEx!__acrt_locale_free_numeric+0x2f
0048f9bc 6cfb2b55 CfgRelayEx!__acrt_free_locale+0x6b
0048f9cc 6cfb28d2 CfgRelayEx!replace_current_thread_locale_nolock+0x36
0048fa04 6cfb29b0 CfgRelayEx!__crt_seh_guarded_call<void>::operator()<<lambda_5b71d36f03204c0beab531769a5b5694>,<lambda_be2b3da3f62db62e9dad5dc70221a656> &,<lambda_8f9ce462984622f9bf76b59e2aaaf805> >+0x29
0048fa24 6cfb2b18 CfgRelayEx!__acrt_lock_and_call<<lambda_be2b3da3f62db62e9dad5dc70221a656> >+0x24
0048fa64 6cfb2a68 CfgRelayEx!destroy_ptd+0xa2
0048fa70 77a795c5 CfgRelayEx!destroy_fls+0x13
0048fa90 76683fad ntdll!RtlFlsFree+0xa0
0048fa9c 6cfb6c1b KERNELBASE!FlsFree+0xe
0048fab0 6cfb2cdb CfgRelayEx!__acrt_FlsFree+0x3d
0048fab8 6cfb12f7 CfgRelayEx!__acrt_uninitialize_ptd+0x10
0048fac4 6cf98dfd CfgRelayEx!__acrt_uninitialize_critical+0xd
0048facc 6cf9931e CfgRelayEx!__scrt_dllmain_uninitialize_critical+0x7
0048fad0 6cf992f4 CfgRelayEx!dllmain_crt_process_detach+0x80
0048fb04 6cf9918f CfgRelayEx!dllmain_crt_process_detach+0x56
0048fb10 6cf993df CfgRelayEx!dllmain_crt_dispatch+0x4e
0048fb50 6cf9947d CfgRelayEx!dllmain_dispatch+0xaf
0048fb64 77a59264 CfgRelayEx!_DllMainCRTStartup+0x1c
0048fb84 77a78fa8 ntdll!LdrpCallInitRoutine+0x14
0048fc28 77a78e4a ntdll!LdrShutdownProcess+0x1aa
0048fc3c 755b7a2c ntdll!RtlExitUserProcess+0x74
0048fc50 000f275a kernel32!ExitProcessStub+0x12
0048fc5c 000f26ef srvhost!exit_or_terminate_process+0x40
0048fc94 000f2895 srvhost!common_exit+0xee
0048fca8 000e7e90 srvhost!exit+0x11
0048fce8 755b343d srvhost!__scrt_common_main_seh+0x179
0048fcf4 77a59802 kernel32!BaseThreadInitThunk+0xe
0048fd34 77a597d5 ntdll!__RtlUserThreadStart+0x70
0048fd4c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
04dce05c 77db6f8c ntdll!RtlpAllocateHeap+0x1e
04dce0f8 77db5f2e ntdll!RtlpAllocateHeapInternal+0x104c
04dce114 7653157c ntdll!RtlAllocateHeap+0x3e
04dce24c 764f1b5a KERNELBASE!BaseRegEnumValueOld+0x1ca
04dce26c 764f0c92 KERNELBASE!LocalBaseRegEnumValue+0x1a
04dce2e8 7768475c KERNELBASE!RegEnumValueW+0xd2
04dce400 77680001 gdi32full!CacheFontLinkingData+0x1c8
04dce420 77681e9e gdi32full!IsFontRegLinked+0x28
04dce9c8 776829fc gdi32full!LoadFont+0x336
04dce9ec 776834f3 gdi32full!FindOrCreateFaceCache+0x98
04dceaf0 7768adf4 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
04dcee98 776891f6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
04dcf304 776882ef gdi32full!ScriptStringAnalyse+0xa16
04dcf4bc 77687b40 gdi32full!LpkCharsetDraw+0x60f
04dcf4e8 7788d37d gdi32full!LpkDrawTextEx+0x30
04dcf544 7788d214 user32!DT_DrawStr+0x5f
04dcf5a4 7788cd4b user32!DT_GetLineBreak+0xa2
04dcf674 7788cb4e user32!DrawTextExWorker+0x1f9
04dcf690 6b1de6ca user32!DrawTextExW+0x1e
04dcf6f4 6b1ddd34 uxtheme!CTextDraw::GetTextExtent+0xa4
04dcf73c 6b1d43c9 uxtheme!GetThemeTextExtent+0x74
04dcf790 6b1e0f87 uxtheme!_GetNcCaptionTextSize+0x61
04dcf880 6b1e293c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
04dcf92c 6b1e29ef uxtheme!_WindowPosChangedWorker+0x7c
04dcf938 6b1df545 uxtheme!OnOwpPostWindowPosChanged+0x1f
04dcf988 77897ff3 uxtheme!ThemePostWndProc+0x355
04dcfa74 77897bca user32!UserCallWinProcCheckWow+0x363
04dcfad8 7789fc37 user32!DispatchClientMessage+0xea
04dcfb18 77de54ed user32!__fnINLPWINDOWPOS+0x37
04dcfb68 75e6124c ntdll!KiUserCallbackDispatcher+0x4d
04dcfb6c 6b1fd44f win32u!NtUserSetWindowPos+0xc
04dcfb98 6b1e00ef uxtheme!OnOwpPreDwmCompositionChanged+0x4f
04dcfbf4 77897f9f uxtheme!ThemePreWndProc+0x43f
04dcfce0 77896901 user32!UserCallWinProcCheckWow+0x30f
04dcfd5c 77896420 user32!DispatchMessageWorker+0x4d1
04dcfd68 560ef5a1 user32!DispatchMessageW+0x10
04dcfd8c 560ef2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
04dcfdec 560f196f CfgRelayEx!CConfigCenterStub::Process+0xa7
04dcfdf8 5610ffcb CfgRelayEx!CThread::ThreadProc+0x1f
04dcfe34 773ffcc9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04dcfe44 77dd80ce kernel32!BaseThreadInitThunk+0x19
04dcfea0 77dd809e ntdll!__RtlUserThreadStart+0x2f
04dcfeb0 00000000 ntdll!_RtlUserThreadStart+0x1b