Crash in cfgrelayex, Analyzed 3 dumps, total processed 94, rate equals 3.19%

Top 1: Version = 2.7224.1000.620, Total count = 3

dump count = 1

ChildEBP RetAddr  
038ae048 77275ffc gdi32full!pcfLocateCFONT+0x9
038ae3c8 77270cb4 gdi32full!GetFontRealizationInfo+0xdc
038ae978 77271816 gdi32full!LoadFont+0x76
038ae99c 77272039 gdi32full!FindOrCreateFaceCache+0x98
038aeaa0 7727770b gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
038aef04 772768ef gdi32full!ScriptStringAnalyse+0x92b
038af0b4 77276140 gdi32full!LpkCharsetDraw+0x60f
038af0e0 7686adfd gdi32full!LpkDrawTextEx+0x30
038af13c 7686ac94 user32!DT_DrawStr+0x5f
038af19c 7686a7cb user32!DT_GetLineBreak+0xa2
038af26c 7686a5ce user32!DrawTextExWorker+0x1f9
038af288 7261e6ea user32!DrawTextExW+0x1e
038af2ec 7261dd84 uxtheme!CTextDraw::GetTextExtent+0xa4
038af334 72614349 uxtheme!GetThemeTextExtent+0x74
038af388 72620fa7 uxtheme!_GetNcCaptionTextSize+0x61
038af47c 7262295c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
038af528 72622a0f uxtheme!_WindowPosChangedWorker+0x7c
038af534 7261f565 uxtheme!OnOwpPostWindowPosChanged+0x1f
038af584 76875ea3 uxtheme!ThemePostWndProc+0x355
038af66c 76875a7a user32!UserCallWinProcCheckWow+0x363
038af6d0 7687ce97 user32!DispatchClientMessage+0xea
038af710 77604e7d user32!__fnINLPWINDOWPOS+0x37
038af760 7263d4af ntdll!KiUserCallbackDispatcher+0x4d
038af78c 7262010f uxtheme!OnOwpPreDwmCompositionChanged+0x4f
038af7e8 76875e4f uxtheme!ThemePreWndProc+0x43f
038af8d0 76873bea user32!UserCallWinProcCheckWow+0x30f
038af944 768739b0 user32!DispatchMessageWorker+0x22a
038af950 787df5a1 user32!DispatchMessageW+0x10
038af974 787df2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
038af9d4 787e196f CfgRelayEx!CConfigCenterStub::Process+0xa7
038af9e0 787fffcb CfgRelayEx!CThread::ThreadProc+0x1f
038afa1c 75adfa29 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
038afa2c 775f7a7e kernel32!BaseThreadInitThunk+0x19
038afa88 775f7a4e ntdll!__RtlUserThreadStart+0x2f
038afa98 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
043de30c 762060a7 gdi32full!bGetRealizationInfoInternal+0x15
043de340 76234e13 gdi32full!GetFontRealizationInfo+0xd7
043de8f0 7623734f gdi32full!LoadFont+0x70
043de914 76235e19 gdi32full!FindOrCreateFaceCache+0x98
043dea18 762090bc gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
043dedb8 762094e6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2ac
043deec4 76206d7b gdi32full!ScriptStringAnalyse+0x3e6
043df034 762065e0 gdi32full!LpkCharsetDraw+0x53b
043df060 76cac923 gdi32full!LpkDrawTextEx+0x30
043df0e4 76cac31d user32!DT_GetLineBreak+0x113
043df1a4 76cc69be user32!DrawTextExWorker+0x1ed
043df1c0 700ceeb9 user32!DrawTextExW+0x1e
043df65c 700cc379 uxtheme!CThemeWnd::GetNcWindowMetrics+0x809
043df7a8 76ca70e3 uxtheme!_ThemeDefWindowProc+0x899
043df89c 76ca6b4a user32!UserCallWinProcCheckWow+0x4d3
043df900 76cb0237 user32!DispatchClientMessage+0xea
043df940 76ed710c user32!__fnINLPWINDOWPOS+0x37
043df990 700fb9cf ntdll!KiUserCallbackDispatcher+0x4c
043df9bc 700cdda3 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
043dfa18 76ca708a uxtheme!ThemePreWndProc+0x413
043dfb0c 76ca59e8 user32!UserCallWinProcCheckWow+0x47a
043dfb88 76ca5520 user32!DispatchMessageWorker+0x4b8
043dfb94 50f5f5a1 user32!DispatchMessageW+0x10
043dfbb8 50f5f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
043dfc18 50f6196f CfgRelayEx!CConfigCenterStub::Process+0xa7
043dfc24 50f7ffcb CfgRelayEx!CThread::ThreadProc+0x1f
043dfc60 75d86ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
043dfc70 76ec8f9f kernel32!BaseThreadInitThunk+0x19
043dfcc8 76ec8f6d ntdll!__RtlUserThreadStart+0x2b
043dfcd8 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0418e280 75e12f1a gdi32full!GetFontRealizationInfo+0x15
0418e2b0 75e12c9e gdi32full!GdiRealizationInfo+0x2a
0418e36c 75e11fef gdi32full!GetFaceAndSizeMetrics+0x5e
0418e470 75e193f4 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x35
0418e818 75e177f6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
0418ec84 75e168ef gdi32full!ScriptStringAnalyse+0xa16
0418ee0c 75e16140 gdi32full!LpkCharsetDraw+0x60f
0418ee38 75c4adfd gdi32full!LpkDrawTextEx+0x30
0418ee94 75c4ac94 user32!DT_DrawStr+0x5f
0418eef4 75c4a7cb user32!DT_GetLineBreak+0xa2
0418efc4 75c4a5ce user32!DrawTextExWorker+0x1f9
0418efe0 6d81e6ea user32!DrawTextExW+0x1e
0418f044 6d81dd84 uxtheme!CTextDraw::GetTextExtent+0xa4
0418f08c 6d814349 uxtheme!GetThemeTextExtent+0x74
0418f0e0 6d820fa7 uxtheme!_GetNcCaptionTextSize+0x61
0418f1d4 6d82295c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
0418f280 6d822a0f uxtheme!_WindowPosChangedWorker+0x7c
0418f28c 6d81f565 uxtheme!OnOwpPostWindowPosChanged+0x1f
0418f2dc 75c55ea3 uxtheme!ThemePostWndProc+0x355
0418f3c4 75c55a7a user32!UserCallWinProcCheckWow+0x363
0418f428 75c5ce97 user32!DispatchClientMessage+0xea
0418f468 77564e4d user32!__fnINLPWINDOWPOS+0x37
0418f4b8 763a124c ntdll!KiUserCallbackDispatcher+0x4d
0418f4bc 6d83d4af win32u!NtUserSetWindowPos+0xc
0418f4e8 6d82010f uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0418f544 75c55e4f uxtheme!ThemePreWndProc+0x43f
0418f62c 75c53bea user32!UserCallWinProcCheckWow+0x30f
0418f6a0 75c539b0 user32!DispatchMessageWorker+0x22a
0418f6ac 60f5f5a1 user32!DispatchMessageW+0x10
0418f6d0 60f5f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0418f730 60f6196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0418f73c 60f7ffcb CfgRelayEx!CThread::ThreadProc+0x1f
0418f778 753bfa29 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0418f788 77557a4e kernel32!BaseThreadInitThunk+0x19
0418f7e4 77557a1e ntdll!__RtlUserThreadStart+0x2f
0418f7f4 00000000 ntdll!_RtlUserThreadStart+0x1b