Crash in cfgrelayex, Analyzed 2 dumps, total processed 171, rate equals 1.17%

Top 1: Version = 2.8425.1000.113, Total count = 2

dump count = 1

ChildEBP RetAddr  
03abe134 7793b0cf ntdll!RtlpAllocateHeap+0x1e
03abe1d0 7793ae8e ntdll!RtlpAllocateHeapInternal+0x22f
03abe1e8 7725bc6d ntdll!RtlAllocateHeap+0x3e
03abe200 77258253 gdi32full!UspAllocCache+0x2d
03abe270 772580b4 gdi32full!UniStorInit+0x31
03abe6c8 7725998b gdi32full!InitUnistor+0x170
03abec70 7725c46d gdi32full!LoadFont+0x48e
03abec94 7725afad gdi32full!FindOrCreateFaceCache+0x98
03abed98 772291cd gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
03abf138 772295b6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x27d
03abf244 7722762a gdi32full!ScriptStringAnalyse+0x3a6
03abf3d4 77226880 gdi32full!LpkCharsetDraw+0x62a
03abf400 7593de42 gdi32full!LpkDrawTextEx+0x30
03abf48c 7593d83d user32!DT_GetLineBreak+0x122
03abf54c 7596320e user32!DrawTextExWorker+0x1ed
03abf568 65b6b6c6 user32!DrawTextExW+0x1e
03abf9c8 65b6de2b uxtheme!CThemeWnd::GetNcWindowMetrics+0x8b6
03abfa74 65b6debf uxtheme!_WindowPosChangedWorker+0x77
03abfa80 65b6a525 uxtheme!OnOwpPostWindowPosChanged+0x1f
03abfad4 75945043 uxtheme!ThemePostWndProc+0x405
03abfbbc 75944b2a user32!UserCallWinProcCheckWow+0x463
03abfc20 7594e9c7 user32!DispatchClientMessage+0xea
03abfc60 7797427d user32!__fnINLPWINDOWPOS+0x37
03abfcb0 778d2ddc ntdll!KiUserCallbackDispatcher+0x4d
03abfcb4 65b9379f win32u!NtUserSetWindowPos+0xc
03abfce0 65b6ac20 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
03abfd3c 75945016 uxtheme!ThemePreWndProc+0x610
03abfe24 759440de user32!UserCallWinProcCheckWow+0x436
03abfe98 75943ec0 user32!DispatchMessageWorker+0x20e
03abfea4 7a1024f1 user32!DispatchMessageW+0x10
03abfec8 7a102247 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
03abff28 7a1048bf CfgRelayEx!CConfigCenterStub::Process+0xa7
03abff34 7a12b53b CfgRelayEx!CThread::ThreadProc+0x1f
03abff70 75d56359 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
03abff80 77967c14 kernel32!BaseThreadInitThunk+0x19
03abffdc 77967be4 ntdll!__RtlUserThreadStart+0x2f
03abffec 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
03fde018 76015ffc gdi32full!pcfLocateCFONT+0x8
03fde398 76010cb4 gdi32full!GetFontRealizationInfo+0xdc
03fde948 76011816 gdi32full!LoadFont+0x76
03fde96c 76012039 gdi32full!FindOrCreateFaceCache+0x98
03fdea70 760193f4 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
03fdee18 760177f6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
03fdf284 760168ef gdi32full!ScriptStringAnalyse+0xa16
03fdf424 76016140 gdi32full!LpkCharsetDraw+0x60f
03fdf450 75e0ae0d gdi32full!LpkDrawTextEx+0x30
03fdf4ac 75e0aca4 user32!DT_DrawStr+0x5f
03fdf50c 75e0a7db user32!DT_GetLineBreak+0xa2
03fdf5dc 75e0a5de user32!DrawTextExWorker+0x1f9
03fdf5f8 72dde6ea user32!DrawTextExW+0x1e
03fdf65c 72dddd84 uxtheme!CTextDraw::GetTextExtent+0xa4
03fdf6a4 72dd4349 uxtheme!GetThemeTextExtent+0x74
03fdf6f8 72de0fa7 uxtheme!_GetNcCaptionTextSize+0x61
03fdf7ec 72de295c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
03fdf898 72de2a0f uxtheme!_WindowPosChangedWorker+0x7c
03fdf8a4 72ddf565 uxtheme!OnOwpPostWindowPosChanged+0x1f
03fdf8f4 75e15ef3 uxtheme!ThemePostWndProc+0x355
03fdf9dc 75e15aca user32!UserCallWinProcCheckWow+0x363
03fdfa40 75e1cf37 user32!DispatchClientMessage+0xea
03fdfa80 77a7505d user32!__fnINLPWINDOWPOS+0x37
03fdfad0 75fa124c ntdll!KiUserCallbackDispatcher+0x4d
03fdfad4 72dfd4af win32u!NtUserSetWindowPos+0xc
03fdfb00 72de010f uxtheme!OnOwpPreDwmCompositionChanged+0x4f
03fdfb5c 75e15e9f uxtheme!ThemePreWndProc+0x43f
03fdfc44 75e13c3a user32!UserCallWinProcCheckWow+0x30f
03fdfcb8 75e13a00 user32!DispatchMessageWorker+0x22a
03fdfcc4 655af5a1 user32!DispatchMessageW+0x10
03fdfce8 655af2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
03fdfd48 655b196f CfgRelayEx!CConfigCenterStub::Process+0xa7
03fdfd54 655cffcb CfgRelayEx!CThread::ThreadProc+0x1f
03fdfd90 7733fa29 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
03fdfda0 77a67c7e kernel32!BaseThreadInitThunk+0x19
03fdfdfc 77a67c4e ntdll!__RtlUserThreadStart+0x2f
03fdfe0c 00000000 ntdll!_RtlUserThreadStart+0x1b