Crash in cfgrelayex, Analyzed 2 dumps, total processed 2041, rate equals 0.10%

Top 1: Version = 2.8425.1000.113, Total count = 2

dump count = 1

ChildEBP RetAddr  
03fde018 76015ffc gdi32full!pcfLocateCFONT+0x8
03fde398 76010cb4 gdi32full!GetFontRealizationInfo+0xdc
03fde948 76011816 gdi32full!LoadFont+0x76
03fde96c 76012039 gdi32full!FindOrCreateFaceCache+0x98
03fdea70 760193f4 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
03fdee18 760177f6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
03fdf284 760168ef gdi32full!ScriptStringAnalyse+0xa16
03fdf424 76016140 gdi32full!LpkCharsetDraw+0x60f
03fdf450 75e0ae0d gdi32full!LpkDrawTextEx+0x30
03fdf4ac 75e0aca4 user32!DT_DrawStr+0x5f
03fdf50c 75e0a7db user32!DT_GetLineBreak+0xa2
03fdf5dc 75e0a5de user32!DrawTextExWorker+0x1f9
03fdf5f8 72dde6ea user32!DrawTextExW+0x1e
03fdf65c 72dddd84 uxtheme!CTextDraw::GetTextExtent+0xa4
03fdf6a4 72dd4349 uxtheme!GetThemeTextExtent+0x74
03fdf6f8 72de0fa7 uxtheme!_GetNcCaptionTextSize+0x61
03fdf7ec 72de295c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
03fdf898 72de2a0f uxtheme!_WindowPosChangedWorker+0x7c
03fdf8a4 72ddf565 uxtheme!OnOwpPostWindowPosChanged+0x1f
03fdf8f4 75e15ef3 uxtheme!ThemePostWndProc+0x355
03fdf9dc 75e15aca user32!UserCallWinProcCheckWow+0x363
03fdfa40 75e1cf37 user32!DispatchClientMessage+0xea
03fdfa80 77a7505d user32!__fnINLPWINDOWPOS+0x37
03fdfad0 75fa124c ntdll!KiUserCallbackDispatcher+0x4d
03fdfad4 72dfd4af win32u!NtUserSetWindowPos+0xc
03fdfb00 72de010f uxtheme!OnOwpPreDwmCompositionChanged+0x4f
03fdfb5c 75e15e9f uxtheme!ThemePreWndProc+0x43f
03fdfc44 75e13c3a user32!UserCallWinProcCheckWow+0x30f
03fdfcb8 75e13a00 user32!DispatchMessageWorker+0x22a
03fdfcc4 655af5a1 user32!DispatchMessageW+0x10
03fdfce8 655af2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
03fdfd48 655b196f CfgRelayEx!CConfigCenterStub::Process+0xa7
03fdfd54 655cffcb CfgRelayEx!CThread::ThreadProc+0x1f
03fdfd90 7733fa29 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
03fdfda0 77a67c7e kernel32!BaseThreadInitThunk+0x19
03fdfdfc 77a67c4e ntdll!__RtlUserThreadStart+0x2f
03fdfe0c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
04fcfad4 786bb972 CfgRelayEx!TrailingDownVec+0x173
04fcfaf4 786bbe32 CfgRelayEx!Pickle::Pickle+0x62
04fcfb08 786b757e CfgRelayEx!IPC::Message::Message+0x12
04fcfb1c 786b6cb1 CfgRelayEx!std::queue<IPC::Message,std::deque<IPC::Message,std::allocator<IPC::Message> > >::push+0x5e
04fcfb5c 756534c3 CfgRelayEx!CChannelImpl::WndProc+0xd1
04fcfb88 75644316 user32!_InternalCallWinProc+0x2b
04fcfc80 75643d7a user32!UserCallWinProcCheckWow+0x4c6
04fcfce4 756b3b03 user32!DispatchClientMessage+0xea
04fcfd28 7785919d user32!__fnCOPYDATA+0x53
04fcfd80 756506f0 ntdll!KiUserCallbackDispatcher+0x4d
04fcfdbc 786b24ab user32!GetMessageW+0x30
04fcfdec 786b2247 CfgRelayEx!WTL::CMessageLoop::Run+0x7b
04fcfe4c 786b48bf CfgRelayEx!CConfigCenterStub::Process+0xa7
04fcfe58 786db53b CfgRelayEx!CThread::ThreadProc+0x1f
04fcfe94 763c7ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04fcfea4 7784c10b kernel32!BaseThreadInitThunk+0x19
04fcfefc 7784c08f ntdll!__RtlUserThreadStart+0x2b
04fcff0c 00000000 ntdll!_RtlUserThreadStart+0x1b