Crash in cfgrelayex, Analyzed 2 dumps, total processed 87, rate equals 2.30%

Top 1: Version = 2.7224.1000.620, Total count = 2

dump count = 1

ChildEBP RetAddr  
0423e4c8 76e01ba6 gdi32full!LoadFont+0x15
0423e4ec 76e023c9 gdi32full!FindOrCreateFaceCache+0x98
0423e5f0 76e09784 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
0423e998 76e07b86 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
0423ee04 76e06c7f gdi32full!ScriptStringAnalyse+0xa16
0423efac 76e064d0 gdi32full!LpkCharsetDraw+0x60f
0423efd8 766ecb1d gdi32full!LpkDrawTextEx+0x30
0423f034 766ec9b4 user32!DT_DrawStr+0x5f
0423f094 766ec4eb user32!DT_GetLineBreak+0xa2
0423f164 766ec2ee user32!DrawTextExWorker+0x1f9
0423f180 697fe77a user32!DrawTextExW+0x1e
0423f1e4 697fde14 uxtheme!CTextDraw::GetTextExtent+0xa4
0423f22c 697f43e9 uxtheme!GetThemeTextExtent+0x74
0423f280 69801027 uxtheme!_GetNcCaptionTextSize+0x61
0423f374 698029dc uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
0423f420 69802a8f uxtheme!_WindowPosChangedWorker+0x7c
0423f42c 697ff5f5 uxtheme!OnOwpPostWindowPosChanged+0x1f
0423f47c 766f7bb3 uxtheme!ThemePostWndProc+0x355
0423f564 766f778a user32!UserCallWinProcCheckWow+0x363
0423f5c8 766feba7 user32!DispatchClientMessage+0xea
0423f608 777d4f5d user32!__fnINLPWINDOWPOS+0x37
0423f658 6981d7ef ntdll!KiUserCallbackDispatcher+0x4d
0423f684 6980018f uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0423f6e0 766f7b5f uxtheme!ThemePreWndProc+0x43f
0423f7c8 766f58fa user32!UserCallWinProcCheckWow+0x30f
0423f83c 766f56c0 user32!DispatchMessageWorker+0x22a
0423f848 61e0f5a1 user32!DispatchMessageW+0x10
0423f86c 61e0f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0423f8cc 61e1196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0423f8d8 61e2ffcb CfgRelayEx!CThread::ThreadProc+0x1f
0423f914 7761fa29 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0423f924 777c7b5e kernel32!BaseThreadInitThunk+0x19
0423f980 777c7b2e ntdll!__RtlUserThreadStart+0x2f
0423f990 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
042bfb94 0f90ab96 KERNELBASE!RaiseException+0x58
042bfbd8 0f8f96a3 CfgRelayEx!_CxxThrowException+0x66
042bfbf4 042bfc04 CfgRelayEx!__scrt_throw_std_bad_alloc+0x1c
WARNING: Frame IP not in any known module. Following frames may be wrong.
042bfbf8 0f8ec04c 0x42bfc04
042bfc04 0f8e7417 CfgRelayEx!std::_Default_allocate_traits::_Allocate+0xc
042bfc1c 0f8e73c5 CfgRelayEx!std::_Allocate_manually_vector_aligned<std::_Default_allocate_traits>+0x27
042bfc28 0f8ecfd9 CfgRelayEx!std::_Allocate<8,std::_Default_allocate_traits,0>+0x15
042bfc38 0f8e8858 CfgRelayEx!std::allocator<char>::allocate+0x19
042bfc5c 0f8ed0ed CfgRelayEx!std::basic_string<char,std::char_traits<char>,std::allocator<char> >::_Reallocate_for<<lambda_9366063389c5f42a00a5088cf24e69de>,char const *>+0x58
042bfc80 0f8e98aa CfgRelayEx!std::basic_string<char,std::char_traits<char>,std::allocator<char> >::assign+0x7d
042bfc98 0f8ea3f3 CfgRelayEx!std::basic_string<char,std::char_traits<char>,std::allocator<char> >::operator=+0x5a
042bfca8 0f8eb5a6 CfgRelayEx!CClient::CacheCfg+0x13
042bfd30 0f8eb472 CfgRelayEx!CClientMgr::OnSlowCfgRefresh+0x126
042bfd48 0f8f3390 CfgRelayEx!CClientMgr::OnReceiveMessage+0x42
042bfda4 0f8f320f CfgRelayEx!CChannelImpl::ReceiveThreadImp+0x170
042bfdac 0f90ffcb CfgRelayEx!CChannelImpl::ReceiveThread+0xf
042bfde8 74d1343d CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
042bfdf4 77579812 kernel32!BaseThreadInitThunk+0xe
042bfe34 775797e5 ntdll!__RtlUserThreadStart+0x70
042bfe4c 00000000 ntdll!_RtlUserThreadStart+0x1b