Crash in cfgrelayex, Analyzed 2 dumps, total processed 119, rate equals 1.68%

Top 1: Version = 2.7224.1000.620, Total count = 2

dump count = 1

ChildEBP RetAddr  
0449e590 77309e8b gdi32full!LoadFont+0x15
0449e5b4 77309fe2 gdi32full!FindOrCreateFaceCache+0xc7
0449e6c0 772a8ad5 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x128
0449ea68 772a94cb gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2a5
0449eb84 772aa863 gdi32full!ScriptStringAnalyse+0x3eb
0449ecfc 77450000 gdi32full!LpkCharsetDraw+0xa93
0449ed48 772a87b8 gdi32!_load_config_used <PERF> (gdi32+0x0)
0449eda0 772a76e6 gdi32full!GetLayout+0x68
0449edf4 7745bd72 gdi32full!GetCodePage+0x56
0449ee14 7537effe gdi32!IntersectClipRect+0x22
0449eee4 753ee85e user32!DrawTextExWorker+0x1c4
0449ef00 71172594 user32!DrawTextExW+0x1e
0449ef64 7117857a uxtheme!CTextDraw::GetTextExtent+0x109
0449efac 71169d7d uxtheme!GetThemeTextExtent+0x8a
0449f000 7113694a uxtheme!_GetNcCaptionTextSize+0x61
0449f178 71137c8e uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
0449f25c 7113c3df uxtheme!_WindowPosChangedWorker+0x73
0449f268 71139170 uxtheme!OnOwpPostWindowPosChanged+0x1f
0449f2d0 753743a0 uxtheme!ThemePostWndProc+0x340
0449f3cc 75373df0 user32!UserCallWinProcCheckWow+0x4f0
0449f430 75381407 user32!DispatchClientMessage+0x190
0449f470 7750937d user32!__fnINLPWINDOWPOS+0x37
0449f4c0 76d912ac ntdll!KiUserCallbackDispatcher+0x4d
0449f4c4 71167fff win32u!NtUserSetWindowPos+0xc
0449f4f0 7113a528 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0449f574 75374348 uxtheme!ThemePreWndProc+0x988
0449f670 75372b88 user32!UserCallWinProcCheckWow+0x498
0449f6ec 753726f0 user32!DispatchMessageWorker+0x488
0449f6f8 5ccbf5a1 user32!DispatchMessageW+0x10
0449f71c 5ccbf2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0449f77c 5ccc196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0449f788 5ccdffcb CfgRelayEx!CThread::ThreadProc+0x1f
0449f7c4 77377ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0449f7d4 774fc2eb kernel32!BaseThreadInitThunk+0x19
0449f82c 774fc26f ntdll!__RtlUserThreadStart+0x2b
0449f83c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0418e040 761e54ca gdi32full!pcfLocateCFONT+0x8
0418e080 76211a83 gdi32full!GetFontRealizationInfo+0xca
0418e630 76213fbf gdi32full!LoadFont+0x70
0418e654 76212a89 gdi32full!FindOrCreateFaceCache+0x98
0418e758 761e848c gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
0418eaf8 761e88b6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2ac
0418ec04 761e616b gdi32full!ScriptStringAnalyse+0x3e6
0418ed44 761e59d0 gdi32full!LpkCharsetDraw+0x53b
0418ed70 76ffca33 gdi32full!LpkDrawTextEx+0x30
0418edf4 76ffc42d user32!DT_GetLineBreak+0x113
0418eeb4 77016b4e user32!DrawTextExWorker+0x1ed
0418eed0 70a2e309 user32!DrawTextExW+0x1e
0418f36c 70a2b7b9 uxtheme!CThemeWnd::GetNcWindowMetrics+0x809
0418f4b8 76ff7173 uxtheme!_ThemeDefWindowProc+0x899
0418f5ac 76ff6bda user32!UserCallWinProcCheckWow+0x4d3
0418f610 77000347 user32!DispatchClientMessage+0xea
0418f650 7744719c user32!__fnINLPWINDOWPOS+0x37
0418f6a0 76c7129c ntdll!KiUserCallbackDispatcher+0x4c
0418f6a4 70a5b75f win32u!NtUserSetWindowPos+0xc
0418f6d0 70a2d1e3 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0418f72c 76ff711a uxtheme!ThemePreWndProc+0x413
0418f820 76ff5a78 user32!UserCallWinProcCheckWow+0x47a
0418f89c 76ff55b0 user32!DispatchMessageWorker+0x4b8
0418f8a8 7ab1f5a1 user32!DispatchMessageW+0x10
0418f8cc 7ab1f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0418f92c 7ab2196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0418f938 7ab3ffcb CfgRelayEx!CThread::ThreadProc+0x1f
0418f974 76e56739 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0418f984 77438fef kernel32!BaseThreadInitThunk+0x19
0418f9dc 77438fbd ntdll!__RtlUserThreadStart+0x2b
0418f9ec 00000000 ntdll!_RtlUserThreadStart+0x1b