Crash in cfgrelayex, Analyzed 2 dumps, total processed 266, rate equals 0.75%

Top 1: Version = 2.8325.1000.113, Total count = 2

dump count = 1

ChildEBP RetAddr  
03a7e040 74a97bc9 gdi32full!GetFontRealizationInfo+0x15
03a7e5e8 74a85404 gdi32full!LoadFont+0x69
03a7e60c 74a857f2 gdi32full!FindOrCreateFaceCache+0x98
03a7e710 74a8c284 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
03a7eab8 74a8a66a gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
03a7ebc4 74a89161 gdi32full!ScriptStringAnalyse+0x76a
03a7ed64 74a88990 gdi32full!LpkCharsetDraw+0x611
03a7ed90 77031a02 gdi32full!LpkDrawTextEx+0x30
03a7ee1c 770313fd user32!DT_GetLineBreak+0x122
03a7eedc 770311fe user32!DrawTextExWorker+0x1ed
03a7eef8 706a480c user32!DrawTextExW+0x1e
03a7f348 706a6f4b uxtheme!CThemeWnd::GetNcWindowMetrics+0x87c
03a7f3f4 706a6fdf uxtheme!_WindowPosChangedWorker+0x77
03a7f400 706a3686 uxtheme!OnOwpPostWindowPosChanged+0x1f
03a7f454 77037353 uxtheme!ThemePostWndProc+0x406
03a7f53c 77036e3a user32!UserCallWinProcCheckWow+0x463
03a7f5a0 77044017 user32!DispatchClientMessage+0xea
03a7f5e0 772e28ed user32!__fnINLPWINDOWPOS+0x37
03a7f630 706c419f ntdll!KiUserCallbackDispatcher+0x4d
03a7f65c 706a3d7e uxtheme!OnOwpPreDwmCompositionChanged+0x4f
03a7f6b8 77037326 uxtheme!ThemePreWndProc+0x60e
03a7f7a0 770363db user32!UserCallWinProcCheckWow+0x436
03a7f814 770361b0 user32!DispatchMessageWorker+0x21b
03a7f820 5377f5a1 user32!DispatchMessageW+0x10
03a7f844 5377f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
03a7f8a4 5378196f CfgRelayEx!CConfigCenterStub::Process+0xa7
03a7f8b0 5379ffcb CfgRelayEx!CThread::ThreadProc+0x1f
03a7f8ec 76bdfe09 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
03a7f8fc 772d662d kernel32!BaseThreadInitThunk+0x19
03a7f958 772d65fd ntdll!__RtlUserThreadStart+0x2f
03a7f968 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
003af6d0 6adc605d CfgRelayEx!std::_Tree<std::_Tmap_traits<enum CommonProductType,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::less<enum CommonProductType>,std::allocator<std::pair<enum CommonProductType const ,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > > >,0> >::_Erase+0x28
003af6e8 6ade07d3 CfgRelayEx!std::_Tree<std::_Tmap_traits<enum CommonProductType,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::less<enum CommonProductType>,std::allocator<std::pair<enum CommonProductType const ,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > > >,0> >::_Erase+0x1d
003af70c 6adcc4c3 CfgRelayEx!ATL::`dynamic atexit destructor for '_AtlBaseModule''+0x4d9
003af738 6adcc3a1 CfgRelayEx!<lambda_275893d493268fdec8709772e3fcec0e>::operator()+0x89
003af76c 6adcc3ef CfgRelayEx!__crt_seh_guarded_call<int>::operator()<<lambda_995298e7d72eb4c2aab26c0585b3abe5>,<lambda_275893d493268fdec8709772e3fcec0e> &,<lambda_293819299cbf9a7022e18b56a874bb5c> >+0x27
003af78c 6adcc6c8 CfgRelayEx!__acrt_lock_and_call<<lambda_275893d493268fdec8709772e3fcec0e> >+0x24
003af7a0 6adcbc84 CfgRelayEx!_execute_onexit_table+0x17
003af7d8 6adcbe05 CfgRelayEx!common_exit+0xa1
003af7e8 6adac619 CfgRelayEx!_cexit+0xb
003af81c 6adac4d1 CfgRelayEx!dllmain_crt_process_detach+0x39
003af828 6adac721 CfgRelayEx!dllmain_crt_dispatch+0x4e
003af868 6adac7bf CfgRelayEx!dllmain_dispatch+0xaf
003af87c 76f69264 CfgRelayEx!_DllMainCRTStartup+0x1c
003af89c 76f88fa8 ntdll!LdrpCallInitRoutine+0x14
003af940 76f88e4a ntdll!LdrShutdownProcess+0x1aa
003af954 768a7a3c ntdll!RtlExitUserProcess+0x74
003af968 00902612 kernel32!ExitProcessStub+0x12
003af974 009025a7 srvhost!exit_or_terminate_process+0x40
003af9ac 0090274d srvhost!common_exit+0xee
003af9c0 008d16e0 srvhost!exit+0x11
003afa00 768a344d srvhost!__scrt_common_main_seh+0x179
003afa0c 76f69802 kernel32!BaseThreadInitThunk+0xe
003afa4c 76f697d5 ntdll!__RtlUserThreadStart+0x70
003afa64 00000000 ntdll!_RtlUserThreadStart+0x1b