Crash in cfgrelayex, Analyzed 2 dumps, total processed 103, rate equals 1.94%

Top 1: Version = 2.7224.1000.620, Total count = 2

dump count = 1

ChildEBP RetAddr  
043de30c 762060a7 gdi32full!bGetRealizationInfoInternal+0x15
043de340 76234e13 gdi32full!GetFontRealizationInfo+0xd7
043de8f0 7623734f gdi32full!LoadFont+0x70
043de914 76235e19 gdi32full!FindOrCreateFaceCache+0x98
043dea18 762090bc gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
043dedb8 762094e6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2ac
043deec4 76206d7b gdi32full!ScriptStringAnalyse+0x3e6
043df034 762065e0 gdi32full!LpkCharsetDraw+0x53b
043df060 76cac923 gdi32full!LpkDrawTextEx+0x30
043df0e4 76cac31d user32!DT_GetLineBreak+0x113
043df1a4 76cc69be user32!DrawTextExWorker+0x1ed
043df1c0 700ceeb9 user32!DrawTextExW+0x1e
043df65c 700cc379 uxtheme!CThemeWnd::GetNcWindowMetrics+0x809
043df7a8 76ca70e3 uxtheme!_ThemeDefWindowProc+0x899
043df89c 76ca6b4a user32!UserCallWinProcCheckWow+0x4d3
043df900 76cb0237 user32!DispatchClientMessage+0xea
043df940 76ed710c user32!__fnINLPWINDOWPOS+0x37
043df990 700fb9cf ntdll!KiUserCallbackDispatcher+0x4c
043df9bc 700cdda3 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
043dfa18 76ca708a uxtheme!ThemePreWndProc+0x413
043dfb0c 76ca59e8 user32!UserCallWinProcCheckWow+0x47a
043dfb88 76ca5520 user32!DispatchMessageWorker+0x4b8
043dfb94 50f5f5a1 user32!DispatchMessageW+0x10
043dfbb8 50f5f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
043dfc18 50f6196f CfgRelayEx!CConfigCenterStub::Process+0xa7
043dfc24 50f7ffcb CfgRelayEx!CThread::ThreadProc+0x1f
043dfc60 75d86ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
043dfc70 76ec8f9f kernel32!BaseThreadInitThunk+0x19
043dfcc8 76ec8f6d ntdll!__RtlUserThreadStart+0x2b
043dfcd8 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0506e050 7703c67e ntdll!RtlpAllocateHeapInternal+0x8
0506e06c 7568f6d8 ntdll!RtlAllocateHeap+0x3e
0506e08c 75691da7 ucrtbase!_malloc_base+0x28
0506e0c4 75b34224 ucrtbase!__crt_state_management::wrapped_invoke<void * (__cdecl*)(unsigned int),unsigned int,void *>+0x57
0506e0d0 75b3c5a5 gdi32full!operator new+0x1c
0506e0ec 75b3cee1 gdi32full!CFontHead::CFontHead+0x19
0506e154 75b3b77c gdi32full!InsertCFontCache+0x1e
0506e1c8 75b2f250 gdi32full!plfCreateLOCALFONT+0xf2
0506e38c 75b93846 gdi32full!CreateFontIndirectWImpl+0xc0
0506e488 75b941d8 gdi32full!CacheFontLinkingData+0x233
0506e4a8 75b9456d gdi32full!IsFontRegLinked+0x28
0506ea50 75b8a1bb gdi32full!LoadFont+0x29e
0506ea74 75b8a312 gdi32full!FindOrCreateFaceCache+0xc7
0506eb80 75b28ae5 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x128
0506ef28 75b294db gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2a5
0506f044 75b2a873 gdi32full!ScriptStringAnalyse+0x3eb
0506f1d8 75b28733 gdi32full!LpkCharsetDraw+0xa93
0506f218 76e5f11b gdi32full!LpkDrawTextEx+0x203
0506f27c 76e5f021 user32!DT_DrawStr+0x69
0506f2d4 76e5ec1e user32!DT_GetLineBreak+0xf8
0506f3a4 76ecc76e user32!DrawTextExWorker+0x1c4
0506f3c0 62420f64 user32!DrawTextExW+0x1e
0506f424 62426f4a uxtheme!CTextDraw::GetTextExtent+0x109
0506f46c 6241875d uxtheme!GetThemeTextExtent+0x8a
0506f4c0 623e68ba uxtheme!_GetNcCaptionTextSize+0x61
0506f638 623e7bfe uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
0506f71c 623ec32f uxtheme!_WindowPosChangedWorker+0x73
0506f728 623e90e0 uxtheme!OnOwpPostWindowPosChanged+0x1f
0506f790 76e54260 uxtheme!ThemePostWndProc+0x340
0506f88c 76e53cb0 user32!UserCallWinProcCheckWow+0x4f0
0506f8f0 76e61027 user32!DispatchClientMessage+0x190
0506f930 7706932d user32!__fnINLPWINDOWPOS+0x37
0506f980 74cb12ac ntdll!KiUserCallbackDispatcher+0x4d
0506f984 624169df win32u!NtUserSetWindowPos+0xc
0506f9b0 623ea478 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0506fa30 76e54208 uxtheme!ThemePreWndProc+0x988
0506fb2c 76e52a48 user32!UserCallWinProcCheckWow+0x498
0506fba8 76e525b0 user32!DispatchMessageWorker+0x488
0506fbb4 564ef5a1 user32!DispatchMessageW+0x10
0506fbd8 564ef2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0506fc38 564f196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0506fc44 5650ffcb CfgRelayEx!CThread::ThreadProc+0x1f
0506fc80 76817ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0506fc90 7705c28b kernel32!BaseThreadInitThunk+0x19
0506fce8 7705c20f ntdll!__RtlUserThreadStart+0x2b
0506fcf8 00000000 ntdll!_RtlUserThreadStart+0x1b