Crash in cfgrelayex, Analyzed 2 dumps, total processed 149, rate equals 1.34%

Top 1: Version = 2.7224.1000.620, Total count = 2

dump count = 1

ChildEBP RetAddr  
0015fa68 77dce0c3 ntdll!RtlpLowFragHeapFree+0xc5
0015fa80 77dd48e6 ntdll!RtlFreeHeap+0x105
0015fa94 77dd3e55 ntdll!RtlpFreeDebugInfo+0x3c
0015fad4 74e5c99f ntdll!RtlDeleteCriticalSection+0xd6
0015faec 74e5513d CfgRelayEx!__acrt_lowio_destroy_handle_array+0x22
0015faf8 74e581c5 CfgRelayEx!__acrt_uninitialize_lowio+0x15
0015fb10 74e512e7 CfgRelayEx!__acrt_execute_uninitializers+0x2f
0015fb1c 74e38fac CfgRelayEx!__acrt_uninitialize+0xf
0015fb28 74e392fe CfgRelayEx!__scrt_uninitialize_crt+0x1a
0015fb64 74e3918f CfgRelayEx!dllmain_crt_process_detach+0x60
0015fb70 74e393df CfgRelayEx!dllmain_crt_dispatch+0x4e
0015fbb0 74e3947d CfgRelayEx!dllmain_dispatch+0xaf
0015fbc4 77dd9264 CfgRelayEx!_DllMainCRTStartup+0x1c
0015fbe4 77df8fa8 ntdll!LdrpCallInitRoutine+0x14
0015fc88 77df8e4a ntdll!LdrShutdownProcess+0x1aa
0015fc9c 76067a2c ntdll!RtlExitUserProcess+0x74
0015fca4 77e8f3b0 kernel32!ExitProcessStub+0x12
0015fcb0 00f4275a ntdll! ?? ::FNODOBFM::`string'+0x1
0015fcbc 00f426ef srvhost!exit_or_terminate_process+0x40
0015fcf4 00f42895 srvhost!common_exit+0xee
0015fd08 00f37e90 srvhost!exit+0x11
0015fd48 7606343d srvhost!__scrt_common_main_seh+0x179
0015fd54 77dd9802 kernel32!BaseThreadInitThunk+0xe
0015fd94 77dd97d5 ntdll!__RtlUserThreadStart+0x70
0015fdac 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
04f9e298 75891bde gdi32full!GetFontRealizationInfo+0x15
04f9e848 758929fc gdi32full!LoadFont+0x76
04f9e86c 758934f3 gdi32full!FindOrCreateFaceCache+0x98
04f9e970 7589adf4 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
04f9ed18 758991f6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
04f9f184 758982ef gdi32full!ScriptStringAnalyse+0xa16
04f9f30c 75897b40 gdi32full!LpkCharsetDraw+0x60f
04f9f338 75a8d37d gdi32full!LpkDrawTextEx+0x30
04f9f394 75a8d214 user32!DT_DrawStr+0x5f
04f9f3f4 75a8cd4b user32!DT_GetLineBreak+0xa2
04f9f4c4 75a8cb4e user32!DrawTextExWorker+0x1f9
04f9f4e0 5a9ae6ca user32!DrawTextExW+0x1e
04f9f544 5a9add34 uxtheme!CTextDraw::GetTextExtent+0xa4
04f9f58c 5a9a43c9 uxtheme!GetThemeTextExtent+0x74
04f9f5e0 5a9b0f87 uxtheme!_GetNcCaptionTextSize+0x61
04f9f6d0 5a9b293c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
04f9f77c 5a9b29ef uxtheme!_WindowPosChangedWorker+0x7c
04f9f788 5a9af545 uxtheme!OnOwpPostWindowPosChanged+0x1f
04f9f7d8 75a97ff3 uxtheme!ThemePostWndProc+0x355
04f9f8c4 75a97bca user32!UserCallWinProcCheckWow+0x363
04f9f928 75a9fc37 user32!DispatchClientMessage+0xea
04f9f968 777554ed user32!__fnINLPWINDOWPOS+0x37
04f9f9b8 5a9cd44f ntdll!KiUserCallbackDispatcher+0x4d
04f9f9e4 5a9b00ef uxtheme!OnOwpPreDwmCompositionChanged+0x4f
04f9fa40 75a97f9f uxtheme!ThemePreWndProc+0x43f
04f9fb2c 75a96901 user32!UserCallWinProcCheckWow+0x30f
04f9fba8 75a96420 user32!DispatchMessageWorker+0x4d1
04f9fbb4 79d2f5a1 user32!DispatchMessageW+0x10
04f9fbd8 79d2f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
04f9fc38 79d3196f CfgRelayEx!CConfigCenterStub::Process+0xa7
04f9fc44 79d4ffcb CfgRelayEx!CThread::ThreadProc+0x1f
04f9fc80 764efcc9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04f9fc90 777480ce kernel32!BaseThreadInitThunk+0x19
04f9fcec 7774809e ntdll!__RtlUserThreadStart+0x2f
04f9fcfc 00000000 ntdll!_RtlUserThreadStart+0x1b